Vulnerability Details : CVE-2002-1169
IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of service (crash) via an HTTP request to helpout.exe with a missing HTTP version number, which causes ibmproxy.exe to crash.
Vulnerability category: Denial of service
Products affected by CVE-2002-1169
- cpe:2.3:a:ibm:websphere_caching_proxy_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_caching_proxy_server:3.6:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2002-1169
2.93%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 90 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2002-1169
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
References for CVE-2002-1169
-
http://www.iss.net/security_center/static/10452.php
Vendor Advisory
-
http://www.rapid7.com/advisories/R7-0007.txt
Exploit;Patch;Vendor Advisory
-
http://www-1.ibm.com/support/search.wss?rs=0&q=IY35970&apar=only
-
http://www.securityfocus.com/bid/6002
Jump to