What’s Vulnerable › Vulnerabilities
CVE-2000-0848
- Severity: critical (CVSS 10.0 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 6.4% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2000-11-14 · updated 2026-06-16
Description
Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host: request header.
Affected products
References
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0192.html
- http://www-4.ibm.com/software/webservers/appserv/doc/v3022/fxpklst.htm#Security
- http://www.securityfocus.com/bid/1691
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5252
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0192.html
- http://www-4.ibm.com/software/webservers/appserv/doc/v3022/fxpklst.htm#Security
- http://www.securityfocus.com/bid/1691
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5252
Get alerted when CVE-2000-0848 or the next vulnerability affects your stack