CVE-2009-0880

Currently unrated

Key Information:

Vendor
IBM
Status
Director
Vendor
CVE Published:
12 March 2009

Summary

Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a .. (dot dot) in a /CIMListener/ URI in an M-POST request.

References

http://www.vupen.com/english/advisories/2009/0656
vdb-entryx_refsource_VUPEN
http://osvdb.org/52616
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/501639/100/0/threaded
mailing-listx_refsource_BUGTRAQ

EPSS Score

66% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.