5

CVE-2009-0879

Exploit
The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of service (daemon crash) via a long consumer name, as demonstrated by an M-POST request to a long /CIMListener/ URI.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Director Updateservice_update_1 Version <= 5.20.3
   Microsoft ≫ Windows
Ibm ≫ Director Version3.1.1
   Microsoft ≫ Windows
Ibm ≫ Director Version4.10
   Microsoft ≫ Windows
Ibm ≫ Director Version4.11
   Microsoft ≫ Windows
Ibm ≫ Director Version4.12
   Microsoft ≫ Windows
Ibm ≫ Director Version4.20
   Microsoft ≫ Windows
Ibm ≫ Director Version4.21
   Microsoft ≫ Windows
Ibm ≫ Director Version4.22
   Microsoft ≫ Windows
Ibm ≫ Director Version5.10.0
   Microsoft ≫ Windows
Ibm ≫ Director Version5.10.1
   Microsoft ≫ Windows
Ibm ≫ Director Version5.10.2
   Microsoft ≫ Windows
Ibm ≫ Director Version5.10.3
   Microsoft ≫ Windows
Ibm ≫ Director Version5.20.0
   Microsoft ≫ Windows
Ibm ≫ Director Version5.20.1
   Microsoft ≫ Windows
Ibm ≫ Director Version5.20.2
   Microsoft ≫ Windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.23% 0.942
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://osvdb.org/52615
http://secunia.com/advisories/34212
Vendor Advisory
http://securitytracker.com/id?1021825
Vendor Advisory
http://www.securityfocus.com/archive/1/501638/100/0/threaded
http://www.securityfocus.com/bid/34061
http://www.vupen.com/english/advisories/2009/0656
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49285
https://www.exploit-db.com/exploits/8190
https://www.sec-consult.com/files/20090305-1_IBM_director_DoS.txt
Exploit
https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=dmp&S_PKG=director_x_520&S_TACT=sms&lang=en_US&cp=UTF-8
Patch
Vendor Advisory