IBM HTTP Server Multiple Vulnerabilities

Last Update Date: 26 Aug 2014 09:48 Release Date: 26 Aug 2014 3682 Views

RISK: Medium Risk

TYPE: Servers - Web Servers

Multiple vulnerabilities were identified in IBM HTTP Server, which could be exploited by malicious people to execute arbitrary code and cause denial of service (DoS).

Impact

Denial of Service
Remote Code Execution

System / Technologies affected

Versions 6.0.2, 6.1, 7.0, 8.0, 8.5, 8.5.5

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Apply upgrades and interim fix for different versions:
http://www-01.ibm.com/support/docview.wss?uid=swg21672428

Vulnerability Identifier

CVE-2014-3523
CVE-2014-0231
CVE-2014-0226
CVE-2014-0118
CVE-2014-0117
CVE-2013-5704
CVE-2013-4352

Source

AusCERT
IBM