The HTTP Channel in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 allows remote attackers to cause a denial of service (NullPointerException) via a large amount of chunked data that uses gzip compression.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Websphere_application_server | Ibm | 7.0 (including) | 7.0 (including) |
| Websphere_application_server | Ibm | 7.0.0.1 (including) | 7.0.0.1 (including) |
| Websphere_application_server | Ibm | 7.0.0.3 (including) | 7.0.0.3 (including) |
| Websphere_application_server | Ibm | 7.0.0.5 (including) | 7.0.0.5 (including) |
| Websphere_application_server | Ibm | 7.0.0.7 (including) | 7.0.0.7 (including) |
| Websphere_application_server | Ibm | 7.0.0.9 (including) | 7.0.0.9 (including) |