CVE-2009-0879

2009-03-1215:20:49

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

High

EPSS

0.842

Percentile

98.5%

JSON

The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of service (daemon crash) via a long consumer name, as demonstrated by an M-POST request to a long /CIMListener/ URI.

Affected configurations

Nvd

Node

ibmdirectorRange≤5.20.3service_update_1

ibmdirectorMatch3.1.1

ibmdirectorMatch4.10

ibmdirectorMatch4.11

ibmdirectorMatch4.12

ibmdirectorMatch4.20

ibmdirectorMatch4.21

ibmdirectorMatch4.22

ibmdirectorMatch5.10.0

ibmdirectorMatch5.10.1

ibmdirectorMatch5.10.2

ibmdirectorMatch5.10.3

ibmdirectorMatch5.20.0

ibmdirectorMatch5.20.1

ibmdirectorMatch5.20.2

AND

microsoftwindows

VendorProductVersionCPE
ibmdirector*cpe:2.3:a:ibm:director:*:service_update_1:*:*:*:*:*:*
ibmdirector3.1.1cpe:2.3:a:ibm:director:3.1.1:*:*:*:*:*:*:*
ibmdirector4.10cpe:2.3:a:ibm:director:4.10:*:*:*:*:*:*:*
ibmdirector4.11cpe:2.3:a:ibm:director:4.11:*:*:*:*:*:*:*
ibmdirector4.12cpe:2.3:a:ibm:director:4.12:*:*:*:*:*:*:*
ibmdirector4.20cpe:2.3:a:ibm:director:4.20:*:*:*:*:*:*:*
ibmdirector4.21cpe:2.3:a:ibm:director:4.21:*:*:*:*:*:*:*
ibmdirector4.22cpe:2.3:a:ibm:director:4.22:*:*:*:*:*:*:*
ibmdirector5.10.0cpe:2.3:a:ibm:director:5.10.0:*:*:*:*:*:*:*
ibmdirector5.10.1cpe:2.3:a:ibm:director:5.10.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	director	*	cpe:2.3:a:ibm:director::service_update_1::::::*
ibm	director	3.1.1	cpe:2.3:a:ibm:director:3.1.1:::::::*
ibm	director	4.10	cpe:2.3:a:ibm:director:4.10:::::::*
ibm	director	4.11	cpe:2.3:a:ibm:director:4.11:::::::*
ibm	director	4.12	cpe:2.3:a:ibm:director:4.12:::::::*
ibm	director	4.20	cpe:2.3:a:ibm:director:4.20:::::::*
ibm	director	4.21	cpe:2.3:a:ibm:director:4.21:::::::*
ibm	director	4.22	cpe:2.3:a:ibm:director:4.22:::::::*
ibm	director	5.10.0	cpe:2.3:a:ibm:director:5.10.0:::::::*
ibm	director	5.10.1	cpe:2.3:a:ibm:director:5.10.1:::::::*