CVE-2008-4678 — IBM Websphere Application Server vulnerability

CWE-3993 documents3 sources
Severity
7.8HIGHNVD
EPSS
2.0%
top 16.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Websphere Application Server
Timeline
PublishedOct 22
Latest updateMay 17

Description

The HTTP_Request_Parser method in the HTTP Transport component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 allows remote attackers to cause a denial of service (controller 0C4 abend and application hang) via a long HTTP Host header, related to "storage overlay" on the stack and a "parse failure."

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-j949-7hpc-w79g: The HTTP_Request_Parser method in the HTTP Transport component in IBM WebSphere Application Server (WAS) 6↗2022-05-17
▶
CVEList
CVE-2008-4678: The HTTP_Request_Parser method in the HTTP Transport component in IBM WebSphere Application Server (WAS) 6↗2008-10-22
▶
CVE-2008-4678 — IBM vulnerability | cvebase