CVE-2012-5953 in WebSphere Message
Summary
IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2, when the Parse Query Strings option is enabled on an HTTPInput node, allows remote attackers to cause a denial of service (infinite loop) via a crafted query string.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
11/21/2012
Disclosure
02/20/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 7701 | IBM WebSphere Message HTTPInput Node memory corruption | 119 | Unproven | Official fix | CVE-2012-5953 |