IBM Rational Directory Administrator Chunked Request Handling Vulnerability


Description   IBM has acknowledged a vulnerability in IBM Rational Directory Administrator, which can be exploited by malicious people to bypass certain security restrictions.
For more information:
SA62768
The vulnerability is reported in versions 6.0 through 6.0.0.2.
     
Vulnerable Products   Vulnerable Software:
IBM Rational Directory Administrator 6.x
     
Solution   Apply RDA 6.0.0.2 iFix01.
     
CVE   CVE-2014-0227
     
References   http://www.ibm.com/support/docview.wss?uid=swg21699930
     
Vulnerability Manager Detection   No
     
IPS Protection  
ASQ Engine alarm Available Since
HTTP Request Smuggling : HTTP command found in header
3.2.0
HTTP Request Smuggling : Content-Length and Transfer-Encoding: chunked fields in header
3.2.0
HTTP Request Smuggling : suspicious syntax using HTTP keyword
3.2.0
HTTP Request Smuggling : multiple Content-Length fields
3.2.0
     


 
 
 
 
 Risk level 
Low 

 Vulnerability First Public Report Date 
2015-04-06 

 Target Type 
Server 

 Possible exploit 
Remote