IBM HTTP Server Multiple Vulnerabilities

Last Update Date: 21 Jul 2017 08:58 Release Date: 21 Jul 2017 3129 Views

RISK: Medium Risk

TYPE: Servers - Web Servers

Multiple vulnerabilities have been identified in IBM HTTP Server, which could be exploited by remote attacker to cause denial of service condition and bypass security restrictions on the target system.

Impact

Denial of Service
Security Restriction Bypass

System / Technologies affected

7.0, 8.0, 8.5, 9.0

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix:
http://www.ibm.com/support/docview.wss?uid=swg22005280

Vulnerability Identifier

CVE-2017-7679
CVE-2017-7668
CVE-2017-3167

Source

AusCERT