CVE-2009-0900

2011-10-3019:55:00

CWE-119

[email protected]

web.nvd.nist.gov

ibm websphere

buffer overflow

cve-2009-0900

security vulnerability

6.7 Medium

AI Score

Confidence

Low

4.1 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

Heap-based buffer overflow in the client in IBM WebSphere MQ 6.0 before 6.0.2.7 and 7.0 before 7.0.1.0 allows local users to gain privileges via crafted SSL information in a Client Channel Definition Table (CCDT) file.

Affected configurations

NVD

Node

ibmwebsphere_mqMatch6.0

ibmwebsphere_mqMatch6.0.1.0

ibmwebsphere_mqMatch6.0.1.1

ibmwebsphere_mqMatch6.0.2.0

ibmwebsphere_mqMatch6.0.2.1

ibmwebsphere_mqMatch6.0.2.2

ibmwebsphere_mqMatch6.0.2.3

ibmwebsphere_mqMatch6.0.2.4

ibmwebsphere_mqMatch6.0.2.5

ibmwebsphere_mqMatch6.0.2.6

ibmwebsphere_mqMatch6.0.2.10

Node

ibmwebsphere_mqMatch7.0

ibmwebsphere_mqMatch7.0.0.1

ibmwebsphere_mqMatch7.0.0.2

CPENameOperatorVersion
ibm:websphere_mqibm websphere mqeq6.0
ibm:websphere_mqibm websphere mqeq6.0.1.0
ibm:websphere_mqibm websphere mqeq6.0.1.1
ibm:websphere_mqibm websphere mqeq6.0.2.0
ibm:websphere_mqibm websphere mqeq6.0.2.1
ibm:websphere_mqibm websphere mqeq6.0.2.2
ibm:websphere_mqibm websphere mqeq6.0.2.3
ibm:websphere_mqibm websphere mqeq6.0.2.4
ibm:websphere_mqibm websphere mqeq6.0.2.5
ibm:websphere_mqibm websphere mqeq6.0.2.6

CPE	Name	Operator	Version
ibm:websphere_mq	ibm websphere mq	eq	6.0
ibm:websphere_mq	ibm websphere mq	eq	6.0.1.0
ibm:websphere_mq	ibm websphere mq	eq	6.0.1.1
ibm:websphere_mq	ibm websphere mq	eq	6.0.2.0
ibm:websphere_mq	ibm websphere mq	eq	6.0.2.1
ibm:websphere_mq	ibm websphere mq	eq	6.0.2.2
ibm:websphere_mq	ibm websphere mq	eq	6.0.2.3
ibm:websphere_mq	ibm websphere mq	eq	6.0.2.4
ibm:websphere_mq	ibm websphere mq	eq	6.0.2.5
ibm:websphere_mq	ibm websphere mq	eq	6.0.2.6