CVE-2006-7164: Medium severity linux kernel vulnerability

Published Mar 20, 2007

Updated

SimpleFileServlet in IBM WebSphere Application Server 5.0.1 through 5.0.2.7 on Linux and UNIX does not block certain invalid URIs and does not issue a security challenge, which allows remote attackers to read secure files and obtain sensitive information via certain requests.

Affected Software

20 affected components

Linux Linux kernel

Unix Unix

IBM WebSphere Application Server=5.0.1

IBM WebSphere Application Server=5.0.2

IBM WebSphere Application Server=5.0.2.1

IBM WebSphere Application Server=5.0.2.2

IBM WebSphere Application Server=5.0.2.3

IBM WebSphere Application Server=5.0.2.4

IBM WebSphere Application Server=5.0.2.5

IBM WebSphere Application Server=5.0.2.6

IBM WebSphere Application Server=5.0.2.7

IBM WebSphere Application Server=5.0.2.8

IBM WebSphere Application Server=5.0.2.9

IBM WebSphere Application Server=5.0.2.10

IBM WebSphere Application Server=5.0.2.11

IBM WebSphere Application Server=5.0.2.12

IBM WebSphere Application Server=5.0.2.13

IBM WebSphere Application Server=5.0.2.14

IBM WebSphere Application Server=5.0.2.15

IBM WebSphere Application Server=5.0.2.16

Remediation

Patch Available

http://www-1.ibm.com/support/docview.wss?uid=swg24013029

Event History

Mar 20, 2007

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Data Sourced

10:19 AM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2006-7164?

CVE-2006-7164 has a medium severity rating due to its potential to allow unauthorized access to secure files.

How do I fix CVE-2006-7164?

To fix CVE-2006-7164, update IBM WebSphere Application Server to a version higher than 5.0.2.7.

What systems are affected by CVE-2006-7164?

CVE-2006-7164 affects IBM WebSphere Application Server versions 5.0.1 to 5.0.2.7 on Linux and UNIX systems.

Is CVE-2006-7164 a remote vulnerability?

Yes, CVE-2006-7164 allows remote attackers to exploit the vulnerability.

What type of attack can CVE-2006-7164 facilitate?

CVE-2006-7164 can facilitate attacks that allow remote attackers to read sensitive information from secure files.