CVE-2009-0879

Currently unrated

Key Information:

Vendor
IBM
Status
Director
Vendor
CVE Published:
12 March 2009

Summary

The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of service (daemon crash) via a long consumer name, as demonstrated by an M-POST request to a long /CIMListener/ URI.

References

http://www.vupen.com/english/advisories/2009/0656
vdb-entryx_refsource_VUPEN
http://osvdb.org/52615
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/501638/100/0/threaded
mailing-listx_refsource_BUGTRAQ

EPSS Score

39% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.