CVE-2015-4947 Stack-based buffer overflow in the Administration Server in IBM HTTP Server 6.1.0.x through 6.1.0.47, 7.0.0.x before 7.0.0.39, 8.0.0.x before 8.0.0.12, and 8.5.x before 8.5.5.7, as used in WebSphere A...
HighCVSS 9.0
EPSS 7.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the Administration Server in IBM HTTP Server 6.1.0.x through 6.1.0.47, 7.0.0.x before 7.0.0.39, 8.0.0.x before 8.0.0.12, and 8.5.x before 8.5.5.7, as used in WebSphere Application Server and other products, allows remote authenticated users to execute arbitrary code via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm http server | >= 6.1.0.0, <= 6.1.0.47 | No fix listed |
| ibm http server | >= 7.0.0.0, < 7.0.0.39 | 7.0.0.39 |
| ibm http server | >= 8.0.0.0, < 8.0.0.12 | 8.0.0.12 |
| ibm http server | >= 8.5.0.0, < 8.5.5.7 | 8.5.5.7 |
References
- PI44793 vendor-advisory
- PI45596 vendor-advisory
- www-01.ibm.com vendor-advisory
- 76658 third-party-advisory vdb-entry
- 1033512 third-party-advisory vdb-entry