CVE-2009-2582

2009-07-2320:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2009-2582

akamai download manager

dlm

dlmanager

buffer overflow

remote code execution

http response

vulnerability

7.8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.006 Low

EPSS

Percentile

78.7%

JSON

Stack-based buffer overflow in manager.exe in Akamai Download Manager (aka DLM or dlmanager) before 2.2.4.8 allows remote web servers to execute arbitrary code via a malformed HTTP response during a Redswoosh download, a different vulnerability than CVE-2007-1891 and CVE-2007-1892.

CPENameOperatorVersion
akamai_technologies:download_managerakamai technologies download managerle2.2.4.3
akamai_technologies:download_managerakamai technologies download managereq2.0.4.4
akamai_technologies:download_managerakamai technologies download managereq2.2.3.6
akamai_technologies:download_managerakamai technologies download managereq2.2.1.0
akamai_technologies:download_managerakamai technologies download managereq2.2.0.0
akamai_technologies:download_managerakamai technologies download managereq2.2.3.5

CPE	Name	Operator	Version
akamai_technologies:download_manager	akamai technologies download manager	le	2.2.4.3
akamai_technologies:download_manager	akamai technologies download manager	eq	2.0.4.4
akamai_technologies:download_manager	akamai technologies download manager	eq	2.2.3.6
akamai_technologies:download_manager	akamai technologies download manager	eq	2.2.1.0
akamai_technologies:download_manager	akamai technologies download manager	eq	2.2.0.0
akamai_technologies:download_manager	akamai technologies download manager	eq	2.2.3.5