exploits , vulnerabilities , articles , IBM WebSphere Exported XML Password Encoding Weakness

Title	IBM WebSphere Exported XML Password Encoding Weakness
Published	2003-02-03-12:00AM
Updated	2003-02-06-08:15PM
Class	Design Error
CVE	CVE-MAP-NOMATCH
Remote	No
Local	Yes
Credit	Discovery of this issue is credited to "Jan P. Monsch" <jan.monsch@csnc.ch>.
Vulnerable	IBM WebSphere Application Server Enterprise Edition 4.0 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Sun Solaris 8.0 IBM WebSphere Application Server Advanced Edition 4.0.4 IBM WebSphere Application Server Advanced Edition 3.0 .2.1 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Sun Solaris 8.0 IBM Websphere Application Server 4.0.3 IBM Websphere Application Server 3.5.3 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Sun Solaris 8.0 IBM Websphere Application Server 3.5.2 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Sun Solaris 8.0 IBM Websphere Application Server 3.5.1 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Sun Solaris 8.0 IBM Websphere Application Server 3.5 IBM Websphere Application Server 3.0.2 .1 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Sun Solaris 8.0 IBM Websphere Application Server 3.0.2 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Sun Solaris 8.0 IBM Websphere Application Server 3.0 .2.4 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Sun Solaris 8.0 IBM Websphere Application Server 3.0 .2.3 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Sun Solaris 8.0 IBM Websphere Application Server 3.0 .2.2 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Sun Solaris 8.0 IBM Websphere Application Server 3.0 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Novell Netware 5.0 Sun Solaris 8.0 IBM Websphere Application Server 2.0 IBM AIX 4.3 Linux kernel 2.3 .x Microsoft Windows NT 4.0 Novell Netware 5.0 Sun Solaris 8.0
Not Vulnerable
Code	There is no exploit required.
TXT

Vulnerabilities - newest 10 RSS | More

2008-12-04 Rae Media Web Based Contact Management Login SQL Injection Vulnerability
2008-12-04 Nagios External Commands and Adaptive Commands Unspecified Vulnerability
2008-12-04 Z1Exchange SQL Injection and Cross Site Scripting Vulnerabilities
2008-12-04 mvnForum Cross Site Scripting Vulnerability
2008-12-04 i-Net Solution Orkut Clone SQL Injection and Cross Site Scripting Vulnerabilities
2008-12-04 Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities
2008-12-04 Jbook SQL Injection Vulnerability
2008-12-04 SquirrelMail Malformed HTML Mail Message HTML Injection Vulnerability
2008-12-04 HP-UX Unspecified Local Denial Of Service Vulnerability
2008-12-04 Netrw Vim Script Information Disclosure Vulnerability