Lucene search
HistoryOct 30, 2011 - 7:55 p.m.
CVE-2009-0900
CVSS2
4.1
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:S/C:P/I:P/A:P
AI Score
6.5
Confidence
High
EPSS
0
Percentile
5.1%
Heap-based buffer overflow in the client in IBM WebSphere MQ 6.0 before 6.0.2.7 and 7.0 before 7.0.1.0 allows local users to gain privileges via crafted SSL information in a Client Channel Definition Table (CCDT) file.
Affected configurations
Node
ibmwebsphere_mqMatch6.0
ORibmwebsphere_mqMatch6.0.1.0
ORibmwebsphere_mqMatch6.0.1.1
ORibmwebsphere_mqMatch6.0.2.0
ORibmwebsphere_mqMatch6.0.2.1
ORibmwebsphere_mqMatch6.0.2.2
ORibmwebsphere_mqMatch6.0.2.3
ORibmwebsphere_mqMatch6.0.2.4
ORibmwebsphere_mqMatch6.0.2.5
ORibmwebsphere_mqMatch6.0.2.6
ORibmwebsphere_mqMatch6.0.2.10
Node
ibmwebsphere_mqMatch7.0
ORibmwebsphere_mqMatch7.0.0.1
ORibmwebsphere_mqMatch7.0.0.2
Related
nessus
nessus
IBM WebSphere MQ Client 6.x < 6.0.2.7 / 7.x < 7.0.1.0 CCDT Buffer Overflow
2012-01-27 00:00:00
cve
cve
CVE-2009-0900
2011-10-30 19:55:00
prion
prion
Heap overflow
2011-10-30 19:55:00
cvelist
cvelist
CVE-2009-0900
2011-10-30 19:00:00
CVSS2
4.1
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:S/C:P/I:P/A:P
AI Score
6.5
Confidence
High
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2009-0900