CVE-2008-0389

Unspecified vulnerability in the serveServletsByClassnameEnabled feature in IBM WebSphere Application Server (WAS) 6.0 through 6.0.2.25, 6.1 through 6.1.0.14, and 5.1.1.x before 5.1.1.18 has unknown impact and attack vectors.

• http://secunia.com/advisories/28576Vendor Advisory
• http://secunia.com/advisories/29687Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg24018067
• http://www-1.ibm.com/support/docview.wss?uid=swg24018067
• http://www-1.ibm.com/support/docview.wss?uid=swg24018067
• http://www-1.ibm.com/support/docview.wss?uid=swg24018067
• http://www-1.ibm.com/support/docview.wss?uid=swg27006879#51118
• http://www.securityfocus.com/bid/27371Patch
• http://www.securitytracker.com/id?1019251
• http://www.securitytracker.com/id?1019894
• http://www.vupen.com/english/advisories/2008/0219Vendor Advisory
• http://www.vupen.com/english/advisories/2008/1133Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39808
• http://secunia.com/advisories/28576Vendor Advisory
• http://secunia.com/advisories/29687Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg24018067
• http://www-1.ibm.com/support/docview.wss?uid=swg24018067
• http://www-1.ibm.com/support/docview.wss?uid=swg24018067
• http://www-1.ibm.com/support/docview.wss?uid=swg24018067
• http://www-1.ibm.com/support/docview.wss?uid=swg27006879#51118
• http://www.securityfocus.com/bid/27371Patch
• http://www.securitytracker.com/id?1019251
• http://www.securitytracker.com/id?1019894
• http://www.vupen.com/english/advisories/2008/0219Vendor Advisory
• http://www.vupen.com/english/advisories/2008/1133Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39808

Published

Jan 23, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-0383Multiple SQL injection vulnerabilities in MyBB 1.2.10 and ea…
• CVE-2008-0384OpenBSD 4.2 allows local users to cause a denial of service …
• CVE-2008-0385SQL injection vulnerability in server/widgetallocator.php in…
• CVE-2008-0386Xdg-utils 1.0.2 and earlier allows user-assisted remote atta…
• CVE-2008-0387Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x be…
• CVE-2008-0388SQL injection vulnerability in the WP-Forum 1.7.4 plugin for…
• CVE-2008-0390stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCM…
• CVE-2008-0391inc/elementz.php in aliTalk 1.9.1.1 does not properly verify…
• CVE-2008-0392Multiple buffer overflows in Microsoft Visual Basic Enterpri…
• CVE-2008-0393Directory traversal vulnerability in info.php in GradMan 0.1…
• CVE-2008-0394Buffer overflow in Citadel SMTP server 7.10 and earlier allo…
• CVE-2008-0395Kayako SupportSuite 3.11.01 allows remote attackers to obtai…