CVE-2001-0122

IBM HTTP Server 1.3.x and WebSphere 3.52 - Denial of Service via Malformed HTTP Requests

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2001-0122. PoCs published by Peter Grundl.

AI-analyzed exploit summary This exploit demonstrates a denial of service (DoS) vulnerability in IBM HTTP Server and WebSphere by sending malformed HTTP GET requests with an excessively long user-agent header. Repeated requests exhaust system resources, causing the service to freeze and requiring a restart.

Description

Kernel leak in AfpaCache module of the Fast Response Cache Accelerator (FRCA) component of IBM HTTP Server 1.3.x and Websphere 3.52 allows remote attackers to cause a denial of service via a series of malformed HTTP requests that generate a "bad request" error.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Peter Grundl · textdosmultiple

https://www.exploit-db.com/exploits/20531

View Code ZIP pw:eip

This exploit demonstrates a denial of service (DoS) vulnerability in IBM HTTP Server and WebSphere by sending malformed HTTP GET requests with an excessively long user-agent header. Repeated requests exhaust system resources, causing the service to freeze and requiring a restart.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: IBM HTTP Server and WebSphere (versions affected by CVE-2001-0122)

No auth needed

Prerequisites: Network access to the target server

MITRE ATT&CK