7.2

CVE-2009-0436

The (1) mod_ibm_ssl and (2) mod_cgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as used in WebSphere Application Server (WAS), set incorrect permissions for AF_UNIX sockets, which has unknown impact and local attack vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Websphere Application Server Version 6.0.0.1
Ibm ≫ Websphere Application Server Version 6.0.0.2
Ibm ≫ Websphere Application Server Version 6.0.0.3
Ibm ≫ Websphere Application Server Version 6.0.1
Ibm ≫ Websphere Application Server Version 6.0.1.1
Ibm ≫ Websphere Application Server Version 6.0.1.2
Ibm ≫ Websphere Application Server Version 6.0.1.3
Ibm ≫ Websphere Application Server Version 6.0.1.5
Ibm ≫ Websphere Application Server Version 6.0.1.7
Ibm ≫ Websphere Application Server Version 6.0.1.9
Ibm ≫ Websphere Application Server Version 6.0.1.11
Ibm ≫ Websphere Application Server Version 6.0.1.13
Ibm ≫ Websphere Application Server Version 6.0.1.15
Ibm ≫ Websphere Application Server Version 6.0.1.17
Ibm ≫ Websphere Application Server Version 6.0.2
Ibm ≫ Websphere Application Server Version 6.0.2.1
Ibm ≫ Websphere Application Server Version 6.0.2.2
Ibm ≫ Websphere Application Server Version 6.0.2.3
Ibm ≫ Websphere Application Server Version 6.0.2.4
Ibm ≫ Websphere Application Server Version 6.0.2.5
Ibm ≫ Websphere Application Server Version 6.0.2.6
Ibm ≫ Websphere Application Server Version 6.0.2.7
Ibm ≫ Websphere Application Server Version 6.0.2.9
Ibm ≫ Websphere Application Server Version 6.0.2.11
Ibm ≫ Websphere Application Server Version 6.0.2.13
Ibm ≫ Websphere Application Server Version 6.0.2.15
Ibm ≫ Websphere Application Server Version 6.0.2.17
Ibm ≫ Websphere Application Server Version 6.0.2.19
Ibm ≫ Websphere Application Server Version 6.0.2.22
Ibm ≫ Websphere Application Server Version 6.0.2.23
Ibm ≫ Websphere Application Server Version 6.0.2.24
Ibm ≫ Websphere Application Server Version 6.0.2.25
Ibm ≫ Websphere Application Server Version 6.0.2.27
Ibm ≫ Websphere Application Server Version 6.0.2.28
Ibm ≫ Websphere Application Server Version 6.0.2.29
Ibm ≫ Websphere Application Server Version 6.0.2.30
Ibm ≫ Websphere Application Server Version 6.1.0
Ibm ≫ Websphere Application Server Version 6.1.0.0
Ibm ≫ Websphere Application Server Version 6.1.0.1
Ibm ≫ Websphere Application Server Version 6.1.0.2
Ibm ≫ Websphere Application Server Version 6.1.0.3
Ibm ≫ Websphere Application Server Version 6.1.0.4
Ibm ≫ Websphere Application Server Version 6.1.0.5
Ibm ≫ Websphere Application Server Version 6.1.0.6
Ibm ≫ Websphere Application Server Version 6.1.0.7
Ibm ≫ Websphere Application Server Version 6.1.0.8
Ibm ≫ Websphere Application Server Version 6.1.0.9
Ibm ≫ Websphere Application Server Version 6.1.0.10
Ibm ≫ Websphere Application Server Version 6.1.0.11
Ibm ≫ Websphere Application Server Version 6.1.0.12
Ibm ≫ Websphere Application Server Version 6.1.0.13
Ibm ≫ Websphere Application Server Version 6.1.0.14
Ibm ≫ Websphere Application Server Version 6.1.0.15
Ibm ≫ Websphere Application Server Version 6.1.0.16
Ibm ≫ Websphere Application Server Version 6.1.0.17
Ibm ≫ Websphere Application Server Version 6.1.0.18
Ibm ≫ Websphere Application Server Version 6.1.13
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.37% 0.288
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www-01.ibm.com/support/docview.wss?uid=swg27008517
Patch
http://www-01.ibm.com/support/docview.wss?uid=swg27007951
Patch
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg27006876
Patch
http://www.securityfocus.com/bid/33700
http://www-01.ibm.com/support/docview.wss?uid=swg27007033
Patch
http://www-1.ibm.com/support/docview.wss?uid=swg1PK66154
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/48526