Vulnerability in IBM Sterling B2b Integrator

CVE-2013-0494

IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted HTTP (1) Range or (2) Request-Range header.

EPSS: 0.020 (79.0th percentile) — read the EPSS interpretation.

Affected products

Ibm Sterling_b2b_integrator — versions 5.0, 5.1
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

psirt@us.ibm.com (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@us.ibm.com (vdb-entry, x_refsource_XF)