PT-2009-3090 · Ibm · Ibm Http Server

Publicado 2009-02-10 · Atualizado 2017-08-08 · CVE-2009-0436

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM HTTP Server versions 6.0.x through 6.0.2.30 IBM HTTP Server versions 6.1.x through 6.1.0.18

Description The mod ibm ssl and mod cgid modules in IBM HTTP Server set incorrect permissions for AF UNIX sockets. This issue has unknown impact and can be exploited through local attack vectors.

Recommendations For IBM HTTP Server versions 6.0.x through 6.0.2.30, update to version 6.0.2.31 or later. For IBM HTTP Server versions 6.1.x through 6.1.0.18, update to version 6.1.0.19 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-0436

Produtos afetados

Ibm Http Server

Referências · 9

• http://www-01.ibm.com/support/docview.wss?uid=swg27006876 · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0436 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg27008517 · Correção
• http://www-01.ibm.com/support/docview.wss?uid=swg27007033 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2009-0436 · Nota de Segurança
• http://www-1.ibm.com/support/docview.wss?uid=swg1PK66154 · Correção, Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg27007951 · Aviso do Fabricante
• http://securityfocus.com/bid/33700 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48526 · Nota