CVE-2010-0776

CVSS V2 Medium 5 CVSS V3 None
Description
The Web Container in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 does not properly handle chunked transfer encoding during a call to response.sendRedirect, which allows remote attackers to cause a denial of service via a GET request.
Overview
  • CVE ID
  • CVE-2010-0776
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2010-05-17T22:30:01
  • Last Modified Date
  • 2017-08-17T01:32:07
Weakness Enumerations
CWE URL
CWE-20 http://cwe.mitre.org/data/definitions/20.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.0.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.1.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.1.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.1.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.1.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.1.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.1.9:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.1.11:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.1.13:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.1.15:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.1.17:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.8:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.12:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.14:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.16:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.18:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.20:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.21:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.32:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.33:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.35:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.37:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.0.2.39:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.1.0.25:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.1.0.27:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:6.1.0.29:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:7.0.0.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:websphere_application_server:7.0.0.9:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:N/C:N/I:N/A:P
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • NONE
  • Integrity Impact
  • NONE
  • Availability Impact
  • PARTIAL
  • Base Score
  • 5
  • Severity
  • MEDIUM
  • Exploitability Score
  • 10
  • Impact Score
  • 2.9
References
Reference URL Reference Tags
http://www-01.ibm.com/support/docview.wss?uid=swg1PM08760
https://exchange.xforce.ibmcloud.com/vulnerabilities/58556
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2010-0776
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0776
History
Created Old Value New Value Data Type Notes
2022-05-10 08:58:38 Added to TrackCVE