CVE-2008-4678

Published: Oct 22, 2008Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The HTTP_Request_Parser method in the HTTP Transport component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 allows remote attackers to cause a denial of service (controller 0C4 abend and application hang) via a long HTTP Host header, related to "storage overlay" on the stack and a "parse failure."

Affected (16)

Products: Ibm: Websphere Application Server

Ibm

1 product

Websphere Application Server

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Application Server	Version 6.0.2.11
Ibm Websphere Application Server	Version 6.0.2.13
Ibm Websphere Application Server	Version 6.0.2.15
Ibm Websphere Application Server	Version 6.0.2.17
Ibm Websphere Application Server	Version 6.0.2.19
Ibm Websphere Application Server	Version 6.0.2.1
Ibm Websphere Application Server	Version 6.0.2.23
Ibm Websphere Application Server	Version 6.0.2.25
Ibm Websphere Application Server	Version 6.0.2.27
Ibm Websphere Application Server	Version 6.0.2.2
Ibm Websphere Application Server	Version 6.0.2.3
Ibm Websphere Application Server	Version 6.0.2.4
Ibm Websphere Application Server	Version 6.0.2.5
Ibm Websphere Application Server	Version 6.0.2.6
Ibm Websphere Application Server	Version 6.0.2.9
Ibm Websphere Application Server	Version 6.0.2