CVE-2012-3330: Medium severity IBM WebSphere Application Server vulnerability

Published Nov 14, 2012

Updated

The proxy server in IBM WebSphere Application Server 7.0 before 7.0.0.27, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, and WebSphere Virtual Enterprise, allows remote attackers to cause a denial of service (daemon outage) via a crafted request.

Affected Software

24 affected components

IBM WebSphere Application Server=7.0

IBM WebSphere Application Server=7.0.0.1

IBM WebSphere Application Server=7.0.0.2

IBM WebSphere Application Server=7.0.0.3

IBM WebSphere Application Server=7.0.0.4

IBM WebSphere Application Server=7.0.0.5

IBM WebSphere Application Server=7.0.0.6

IBM WebSphere Application Server=7.0.0.7

IBM WebSphere Application Server=7.0.0.8

IBM WebSphere Application Server=7.0.0.9

IBM WebSphere Application Server=7.0.0.11

IBM WebSphere Application Server=7.0.0.13

IBM WebSphere Application Server=7.0.0.15

IBM WebSphere Application Server=7.0.0.17

IBM WebSphere Application Server=7.0.0.19

IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.21

IBM WebSphere Application Server=7.0.0.23

IBM WebSphere Application Server=7.0.0.25

IBM WebSphere Application Server=8.0.0.0

IBM WebSphere Application Server=8.0.0.1

IBM WebSphere Application Server=8.0.0.2

IBM WebSphere Application Server=8.0.0.3

IBM WebSphere Application Server=8.0.0.4

IBM WebSphere Application Server=8.5.0.0

Event History

Nov 14, 2012

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3330?

CVE-2012-3330 is classified as a denial of service vulnerability which can lead to daemon outages.

How do I fix CVE-2012-3330?

To fix CVE-2012-3330, you should update IBM WebSphere Application Server to version 7.0.0.27, 8.0.0.5, or 8.5.0.1 and later.

Which versions are affected by CVE-2012-3330?

CVE-2012-3330 affects IBM WebSphere Application Server versions 7.0 prior to 7.0.0.27, 8.0 prior to 8.0.0.5, and 8.5 prior to 8.5.0.1.

What type of attack does CVE-2012-3330 enable?

CVE-2012-3330 enables remote attackers to cause a denial of service through crafted requests.

Is CVE-2012-3330 specific to certain IBM products?

Yes, CVE-2012-3330 specifically affects the IBM WebSphere Application Server and WebSphere Virtual Enterprise products.