Lucene search

K
cve[email protected]CVE-2009-3160
HistorySep 10, 2009 - 6:30 p.m.

CVE-2009-3160

2009-09-1018:30:00
web.nvd.nist.gov
30
ibm
websphere
mq
6.x
7.0.1.0
memory overwrite
nvd
cve-2009-3160

8.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:C/A:C

6.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.8%

IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or asynchronous message consumption is enabled, allows attackers to have an unspecified impact via unknown vectors, related to a “memory overwrite” issue.

Affected configurations

NVD
Node
ibmwebsphere_mqMatch6
OR
ibmwebsphere_mqMatch6.0
OR
ibmwebsphere_mqMatch6.0.0.0
OR
ibmwebsphere_mqMatch6.0.1.0
OR
ibmwebsphere_mqMatch6.0.1.1
OR
ibmwebsphere_mqMatch6.0.2.0
OR
ibmwebsphere_mqMatch6.0.2.1
OR
ibmwebsphere_mqMatch6.0.2.2
OR
ibmwebsphere_mqMatch6.0.2.3
OR
ibmwebsphere_mqMatch6.0.2.4
OR
ibmwebsphere_mqMatch6.0.2.5
OR
ibmwebsphere_mqMatch6.0.2.6
OR
ibmwebsphere_mqMatch6.0.2.7
OR
ibmwebsphere_mqMatch7.0.0.0
OR
ibmwebsphere_mqMatch7.0.0.1
OR
ibmwebsphere_mqMatch7.0.0.2
OR
ibmwebsphere_mqMatch7.0.1.0

8.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:C/A:C

6.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.8%

Related for CVE-2009-3160