CVE-2009-3900
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:C/A:N
6.5 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
75.3%
Unspecified vulnerability in the Cluster Management component in IBM PowerHA 5.4, 5.4.1, 5.5, and 6.1 on AIX allows remote attackers to modify the operating-system configuration via packets to the godm port (6177/tcp).
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm:powerha | ibm powerha | eq | 5.4 |
| ibm:powerha | ibm powerha | eq | 5.4.1 |
| ibm:powerha | ibm powerha | eq | 5.5 |
| ibm:powerha | ibm powerha | eq | 6.1 |
References
aix.software.ibm.com/aix/efixes/security/haport_advisory.asc
secunia.com/advisories/37267
www-01.ibm.com/support/docview.wss?uid=isg1IZ61323
www-01.ibm.com/support/docview.wss?uid=isg1IZ61325
www-01.ibm.com/support/docview.wss?uid=isg1IZ62630
www.securityfocus.com/bid/36931
www.vupen.com/english/advisories/2009/3153
exchange.xforce.ibmcloud.com/vulnerabilities/54154
Related
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:C/A:N
6.5 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
75.3%