Denial of Service Vulnerability in IBM Websphere/NetCommerce3
CVE-2001-0390

Currently unrated

Key Information:

Vendor
IBM
Status
Net.commerce Hosting Server
Net.commerce
Websphere Application Server
Vendor
CVE Published:
2 July 2001

Summary

IBM Websphere/NetCommerce3 version 3.1.2 contains a vulnerability that enables remote attackers to initiate a denial of service attack. This can be accomplished by directly invoking the macro.d2w macro with an excessively lengthy string composed of %0a characters, leading to disruptions in service availability.

References

http://www.securityfocus.com/archive/1/176100
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/2588
vdb-entryx_refsource_BID

EPSS Score

7% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.