CVE-2008-4678: High severity ibm websphere application server feature pack for web services vulnerability
The HTTPRequestParser method in the HTTP Transport component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 allows remote attackers to cause a denial of service (controller 0C4 abend and application hang) via a long HTTP Host header, related to "storage overlay" on the stack and a "parse failure."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4678?
CVE-2008-4678 has a high severity rating as it allows remote attackers to induce a denial of service on vulnerable IBM WebSphere Application Server versions.
How do I fix CVE-2008-4678?
To fix CVE-2008-4678, upgrade your IBM WebSphere Application Server to version 6.0.2.31 or later.
Which IBM WebSphere Application Server versions are affected by CVE-2008-4678?
CVE-2008-4678 affects IBM WebSphere Application Server versions 6.0.2 before 6.0.2.31.
What type of exploit is associated with CVE-2008-4678?
CVE-2008-4678 is associated with a denial of service exploit caused by a long HTTP Host header.
Is there a workaround for CVE-2008-4678?
No official workaround exists for CVE-2008-4678; upgrading is the recommended resolution.