IBM HTTP Server Multiple Vulnerabilities

Last Update Date: 18 Jan 2012 14:30 Release Date: 18 Jan 2012 5594 Views

RISK: Medium Risk

TYPE: Servers - Web Servers

Multiple vulnerabilities have been identified in IBM HTTP Server, which can be exploited by malicious, local users to gain escalated privileges and by malicious people to bypass certain security restrictions and cause a DoS (Denial of Service).

Impact

Denial of Service
Elevation of Privilege
Security Restriction Bypass

System / Technologies affected

IBM HTTP Server 7.0.x

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Update to version 7.0.0.21.

Vulnerability Identifier

CVE-2011-3348
CVE-2011-3368
CVE-2011-3607
CVE-2011-3639
CVE-2011-4317

Source

Secunia
IBM