CVE:CVE-2008-4678
CNNVD:CNNVD-200810-379
IBM Websphere应用服务器以Java和Servlet引擎为基础，支持多种HTTP服务，可帮助用户完成从开发、发布到维护交互式的动态网站的所有工作。
IBM WebSphere应用服务器的HTTP Transport组件中的HTTP_Request_Parser方式没有正确地验证用户所提交的HTTP请求。如果远程攻击者在请求中包含有超长的HTTP Host头的话，就可能导致拒绝服务.
solution:Upgrade ibm websphere_application_server to a higher version than 6.0.2,6.0.2.1,6.0.2.2,6.0.2.3,6.0.2.4,6.0.2.5,6.0.2.6,6.0.2.9,6.0.2.11,6.0.2.13,6.0.2.15,6.0.2.17,6.0.2.19,6.0.2.23,6.0.2.25,6.0.2.27,and avoid the version 6.0.2,6.0.2.1,6.0.2.2,6.0.2.3,6.0.2.4,6.0.2.5,6.0.2.6,6.0.2.9,6.0.2.11,6.0.2.13,6.0.2.15,6.0.2.17,6.0.2.19,6.0.2.23,6.0.2.25,6.0.2.27
solution:Upgrade myer_sound_laboratories muscle to a higher version than 4.30,1.00,1.01,1.10,1.20,1.21,1.22,1.23,1.24,1.30,1.31,1.40,1.41,1.42,1.43,1.44,1.45,1.50,1.51,1.60,1.61,1.62,1.63,1.64,1.70,1.71,1.72,1.80,1.82,1.83,1.84,1.90,1.91,1.92,1.93,2.00,2.10,2.11,2.12,2.13,2.14,2.15,2.16,2.17,2.18,2.19,2.20,2.21,2.23,2.24,2.25,2.30,2.31,2.43,2.44,2.45,2.46,2.47,2.48,2.49,2.50,2.51,2.52,2.60,2.61,2.62,2.63,2.64,2.65,3.00,3.01,3.02,3.03,3.10,3.11,3.20,3.21,3.22,3.23,3.24,3.30,3.31,3.32,3.33,3.34,3.40,4.00,4.10,4.11,4.20,4.21,4.22,4.23,4.24,4.25,4.26,4.27,4.28,and avoid the version (,4.30],1.00,1.01,1.10,1.20,1.21,1.22,1.23,1.24,1.30,1.31,1.40,1.41,1.42,1.43,1.44,1.45,1.50,1.51,1.60,1.61,1.62,1.63,1.64,1.70,1.71,1.72,1.80,1.82,1.83,1.84,1.90,1.91,1.92,1.93,2.00,2.10,2.11,2.12,2.13,2.14,2.15,2.16,2.17,2.18,2.19,2.20,2.21,2.23,2.24,2.25,2.30,2.31,2.43,2.44,2.45,2.46,2.47,2.48,2.49,2.50,2.51,2.52,2.60,2.61,2.62,2.63,2.64,2.65,3.00,3.01,3.02,3.03,3.10,3.11,3.20,3.21,3.22,3.23,3.24,3.30,3.31,3.32,3.33,3.34,3.40,4.00,4.10,4.11,4.20,4.21,4.22,4.23,4.24,4.25,4.26,4.27,4.28