Secunia

Description

A weakness and some vulnerabilities have been reported in IBM WebSphere Application Server for z/OS, which can be exploited by malicious people to manipulate certain data, cause a DoS (Denial of Service), or compromise a vulnerable system.

1) A weakness in the IBM HTTP Server can be exploited by malicious people to cause a DoS.

For more information:
SA35781

2) Some vulnerabilities are caused due to the IBM HTTP Server including a vulnerable Apache Portable Runtime version.

For more information:
SA37050

3) A vulnerability is caused due to a NULL pointer dereference error within mod_proxy_ftp when processing responses received from FTP servers.

For more information:
SA37116

4) A vulnerability is caused due to an error in the TLS protocol while handling session re-negotiations.

For more information:
SA37291

Solution
Apply APAR PK96157.
Further details available in Customer Area

Changelog
Further details available in Customer Area

Original Advisory
IBM (PK91361, PK93225, PK96858, PM00675):
http://www-01.ibm.com/support/docview.wss?uid=swg1PK96157

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area