PT-2011-1300 · Ibm · Ibm Websphere Mq

Publicado

2011-10-30

·

Atualizado

2017-08-17

·

CVE-2009-0905

CVSS v2.0

1.7

Baixa

VetorAV:L/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 6.0 through 6.0.2.8 IBM WebSphere MQ versions 7.0 through 7.0.1.0
Description The issue is related to the handling of long group names, which could potentially allow local users to gain privileges by exploiting combinations of group names with the same initial substring.
Recommendations For IBM WebSphere MQ versions 6.0 through 6.0.2.8, update to version 6.0.2.8 or later. For IBM WebSphere MQ versions 7.0 through 7.0.1.0, update to version 7.0.1.0 or later.

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2009-0905

Produtos afetados

Ibm Websphere Mq