2090 : IBM WebSphere Caching Proxy DoS
Printer | http://osvdb.org/2090 | Email This | Edit Vulnerability

Views This Week	Views All Time	Added to OSVDB	Last Modified	Modified (since 2008)	Percent Complete
12	1083	over 8 years ago	over 4 years ago	0 times	75%

Timeline

Disclosure Date
2002-10-23

Description

IBM Web Traffic Express (WTE) is a Web caching proxy server that is included as a component in the WebSphere Edge Server. IBM Web Traffic Express versions 4.x (included with IBM WebSphere Edge Server version 2.0) and 3.6 are vulnerable to a denial of service attack. If a remote attacker sends a specially-crafted HTTP request to the /cgi-bin/helpout.exe script, the attacker would cause the proxy server (ibmproxy.exe) to crash.

Classification

Attack Type: Denial of Service
Impact: Loss of Availability

Technical

The Caching Proxy component of IBM's WebSphere Edge Server v2.0 is vulnerable to a denial-of-service attack against one of the default CGI programs. A malformed HTTP request for /cgi-bin/helpout.exe will cause ibmproxy.exe to crash and cease functioning.

GET /cgi-bin/helpout.exe HTTP

Solution

A suggested workaround is to move the '/cgi-bin/helpout.exe' file to a non-executable directory until a fix has been applied.

Users are advised to install Caching Proxy efix build 4.0.1.26. Users of Caching Proxy Server 3.6 are advised to contact their vendor for information about obtaining fixes.

Products

International Business Machines Corporation	WebSphere	3.6
		4.0

References

ISS X-Force ID: 10452
CVE ID: 2002-1169 (see also: NVD)
Bugtraq ID: 6002
Vendor Specific Advisory URL: http://www.rapid7.com/advisories/R7-0008.txt

Tools & Filters

	11162
Snort	2057

Manual Testing Notes

Credit

Unknown or Incomplete

CVSSv2 Score

CVSSv2 Base Score = 5.0
Source: nvd.nist.gov | Generated: 2003-12-31 | Disagree?

Blogs

This product uses the Daylife API but is not endorsed or certified by Daylife.

This section lists the latest news and blogs found via the daylife API (and for older items, the technorati API), which mention or otherwise discuss this vulnerability.

None found at this time

Comments

Add Comment Hide Add Comment

No Comments.

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.