PT-2009-3732 · Ibm · Ibm Websphere Application Server

Publicado 2009-03-31 · Atualizado 2014-10-24 · CVE-2009-1173

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server (WAS) versions 7.0.0 through 7.0.0.2

Description The issue is related to weak permissions used by IBM WebSphere Application Server for files associated with interim fixes. Specifically, the software uses 777 permissions instead of the intended 755 permissions, allowing attackers to modify files that should be inaccessible.

Recommendations For IBM WebSphere Application Server (WAS) versions 7.0.0 through 7.0.0.2, update to version 7.0.0.3 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-1173

Produtos afetados

Ibm Websphere Application Server

Referências · 9

• http://securityfocus.com/bid/34259 · Nota
• http://vupen.com/english/advisories/2009/0854 · Aviso do Fabricante
• http://secunia.com/advisories/34461 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1PK77590 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1PK82988 · Aviso do Fabricante
• http://secunia.com/advisories/34131 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1173 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-1173 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg27014463 · Correção