IBM HTTP Server Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in IBM HTTP Server versions 8.5 and 9.0. This issue arises in configurations where an attacker has write access to certain parts of the server configuration.

Impact

Exploitation of this vulnerability leads to uncontrolled resource consumption, causing a denial-of-service condition on the server.

Remediation

Users are advised to upgrade to IBM HTTP Server Fix Pack 9.0.5.29 or later, or Fix Pack 8.5.5.30 or later. Additional interim fixes may be available and linked off the interim fix download page.