PT-2009-3089 · Ibm · Ibm Websphere Application Server+1

Published 2009-02-10 · Updated 2017-08-08 · CVE-2009-0435

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1.x through 6.1.0.17

Description The issue is related to an unspecified vulnerability in the IBM Asynchronous I/O library within the Java Message Service component. This vulnerability allows attackers to cause a denial of service, specifically a daemon crash, through vectors related to the aio getioev2 and getEvent methods.

Recommendations For IBM WebSphere Application Server versions 6.1.x through 6.1.0.17, update to version 6.1.0.17 or later to resolve the issue.

Fix

Related Identifiers

CVE-2009-0435

Affected Products

Ibm Asynchronous I/O

Ibm Websphere Application Server

References · 6

• http://www-01.ibm.com/support/docview.wss?rs=0&uid=swg24019205 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg27007951 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0435 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0435 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48525 · Note
• http://securityfocus.com/bid/33700 · Note