IBM HTTP Server mod_ibm_upload Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in IBM HTTP Server versions 8.5 and 9.0. The issue arises in the optional mod_ibm_upload module, where improper handling can lead to a null pointer dereference, causing a crash or unresponsive state in the server.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the server to become unresponsive or to crash.

Remediation

Users are advised to upgrade to IBM HTTP Server Fix Pack 9.0.5.29 or later, or Fix Pack 8.5.5.30 or later. Interim fixes resolving this vulnerability are also available.