critical10.0Public exploit code
CVE-2000-0848
Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host: request header.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM Websphere Application Server 3.0.2 Server Plugin - Denial of Service2000-09-15 · dos · multiple · Verified
Impact
Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host: request header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Websphere Application Server | Version 3.0.2 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0192.html
- http://www-4.ibm.com/software/webservers/appserv/doc/v3022/fxpklst.htm#Security
- http://www.securityfocus.com/bid/1691
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5252
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0192.html
- http://www-4.ibm.com/software/webservers/appserv/doc/v3022/fxpklst.htm#Security
- http://www.securityfocus.com/bid/1691
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5252