IBM HTTP Server Invalid Pointer Dereference Vulnerability Allowing Information Disclosure or Denial-of-Service

A vulnerability in IBM HTTP Server versions 8.5 and 9.0 allows for invalid pointer dereference. This issue can be exploited by a privileged user authenticated to the Administration Server, potentially leading to exposure of sensitive information or causing a denial-of-service condition.

Impact

Exploitation of this vulnerability could result in a denial-of-service condition or unauthorized exposure of sensitive information.

Remediation

Users are advised to upgrade to IBM HTTP Server Fix Pack 9.0.5.29 or later, or Fix Pack 8.5.5.30 or later. Interim fixes resolving this vulnerability are also available. Additional interim fixes may be linked off the interim fix download page.