Unscored CVE-2002-1153 EUVD-2002-1140GHSA-5cp2-xr74-442p

IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request wi…

Published Sep 1, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as "Host".

References

2092 vdb-entry
5749 vdb-entry
20020919 KPMG-2002035: IBM Websphere Large Header DoS mailing-list
websphere-host-header-bo(10140) vdb-entry