// For flags

CVE-2002-1169

IBM Websphere Caching Proxy 3.6/4.0 - Denial of Service

Severity Score

5.0
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

2
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of service (crash) via an HTTP request to helpout.exe with a missing HTTP version number, which causes ibmproxy.exe to crash.

IBM Web Traffic Express Caching Proxy Server 3.6 y 4.x antes de 4.0.1.26 permite atacantes remotso causar una denegación de servicio (caída) mediante una petición HTTP a helpout.exe sin número de versión HTTP, lo que hace que ibmproxy.exe se caiga.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2002-09-27 CVE Reserved
  • 2002-10-18 First Exploit
  • 2002-11-04 CVE Published
  • 2024-02-08 EPSS Updated
  • 2024-08-08 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Ibm
Search vendor "Ibm"
 Websphere Caching Proxy Server
Search vendor "Ibm" for product "Websphere Caching Proxy Server"
 3.6
Search vendor "Ibm" for product "Websphere Caching Proxy Server" and version "3.6"
-
Affected
Ibm
Search vendor "Ibm"
 Websphere Caching Proxy Server
Search vendor "Ibm" for product "Websphere Caching Proxy Server"
 4.0
Search vendor "Ibm" for product "Websphere Caching Proxy Server" and version "4.0"
-
Affected