Description
The server in IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 allows remote attackers to cause a denial of service (daemon crash and message data loss) via malformed headers during a WebSockets connection upgrade.
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21670278
- ibm-messagesight-cve20140921-dos(92074) vdb-entry
- IC98583 vendor-advisory