Lucene search

K
cve[email protected]CVE-2020-4587
HistoryAug 24, 2020 - 4:15 p.m.

CVE-2020-4587

2020-08-2416:15:11
CWE-787
web.nvd.nist.gov
21
ibm
sterling
connect:direct
unix
buffer overflow
vulnerability
cve-2020-4587
ibm x-force id 184578
nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%

IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper bounds checking. A local attacker could manipulate CD UNIX to obtain root provileges. IBM X-Force ID: 184578.

Affected configurations

Vulners
NVD
Node
ibmsterling_connect\Matchdirect4.2.0
OR
ibmsterling_connect\Matchdirect4.3.0
OR
ibmconnect\Matchdirect6.1.0
OR
ibmconnect\Matchdirect6.0.0
VendorProductVersionCPE
ibmsterling_connect\directcpe:2.3:a:ibm:sterling_connect\:direct:4.2.0:*:*:*:*:*:*:*
ibmsterling_connect\directcpe:2.3:a:ibm:sterling_connect\:direct:4.3.0:*:*:*:*:*:*:*
ibmconnect\directcpe:2.3:a:ibm:connect\:direct:6.1.0:*:*:*:*:*:*:*
ibmconnect\directcpe:2.3:a:ibm:connect\:direct:6.0.0:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Sterling Connect:Direct for UNIX",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "4.2.0"
      },
      {
        "status": "affected",
        "version": "4.3.0"
      }
    ]
  },
  {
    "product": "Connect:Direct for UNIX",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "6.1.0"
      },
      {
        "status": "affected",
        "version": "6.0.0"
      }
    ]
  }
]

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2020-4587