CVE-2009-3160

IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or asynchronous message consumption is enabled, allows attackers to have an unspecified impact via unknown vectors, related to a "memory overwrite" issue.

CVSS v2.0 8.8 HIGH

8.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:N/I:C/A:C

Exploitability : 8.6 / Impact : 9.2

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/36647	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg24024153	Patch Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ56259
http://www.securityfocus.com/bid/36310
http://www.vupen.com/english/advisories/2009/2578	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:websphere_mq:6:::::::*
	cpe:2.3:a:ibm:websphere_mq:6.0:::::::*
	cpe:2.3:a:ibm:websphere_mq:6.0.0.0:::::::*
	cpe:2.3:a:ibm:websphere_mq:6.0.1.0:::::::*
	cpe:2.3:a:ibm:websphere_mq:6.0.1.1:::::::*
	cpe:2.3:a:ibm:websphere_mq:6.0.2.0:::::::*
	cpe:2.3:a:ibm:websphere_mq:6.0.2.1:::::::*
	cpe:2.3:a:ibm:websphere_mq:6.0.2.2:::::::*
	cpe:2.3:a:ibm:websphere_mq:6.0.2.3:::::::*
	cpe:2.3:a:ibm:websphere_mq:6.0.2.4:::::::*
	cpe:2.3:a:ibm:websphere_mq:6.0.2.5:::::::*
	cpe:2.3:a:ibm:websphere_mq:6.0.2.6:::::::*
	cpe:2.3:a:ibm:websphere_mq:6.0.2.7:::::::*
	cpe:2.3:a:ibm:websphere_mq:7.0.0.0:::::::*
	cpe:2.3:a:ibm:websphere_mq:7.0.0.1:::::::*
	cpe:2.3:a:ibm:websphere_mq:7.0.0.2:::::::*
	cpe:2.3:a:ibm:websphere_mq:7.0.1.0:::::::*

History

No history.

Information

Published : 2009-09-10 18:30

Updated : 2009-10-01 05:24

NVD link : CVE-2009-3160

Mitre link : CVE-2009-3160

CVE.ORG link : CVE-2009-3160

JSON object : View

Products Affected

ibm

websphere_mq

CWE

NVD-CWE-noinfo

{"id": "CVE-2009-3160", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 8.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 9.2, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-09-10T18:30:00.577", "references": [{"url": "http://secunia.com/advisories/36647", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg24024153", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ56259", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/36310", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2009/2578", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or asynchronous message consumption is enabled, allows attackers to have an unspecified impact via unknown vectors, related to a \"memory overwrite\" issue."}, {"lang": "es", "value": "IBM WebSphere MQ v6.x desde v6.0.2.7, v7.0.0.0, v7.0.0.1, v7.0.0.2, y v7.0.1.0, cuando \"read ahead\" o \"asynchronous message consumption\" esta activado, permite a atacantes remotos obtener un impacto desconocido a traves de vectores desconocidos, relacionado con la sobrescritura de memoria."}], "lastModified": "2009-10-01T05:24:23.860", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:websphere_mq:6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "548ED888-1255-456C-88FD-2884539C157F"}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E6D2279B-482A-4CA6-9EF2-C57A95969BC2"}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9728448F-E295-4C33-B2F4-17FAAFCDF169"}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F36C644-664C-4758-9762-E808C80AE904"}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C670A3F-7BBB-4115-A037-B5E732ABB6BA"}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "24CD8F97-39E0-455C-92CA-F0FE9AE5A0CC"}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C97EC1D0-CA59-4E2C-84EB-054BF27D1BCF"}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CCD33A5-6567-43CB-909D-D1851ACF4AA8"}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3664585-D0B4-467C-9B6D-4F8E239F7DCD"}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C2216808-BAE9-4034-9618-5EC4CCB80E7F"}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B6263B9D-A62A-4E41-958A-968F9ACA0CE6"}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "19983CDF-4769-4B56-98ED-CE7EE0C1AFF6"}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.2.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9377F533-15D0-4F81-B7C1-A84E5346EF6C"}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "985DE0C7-1F86-4128-B177-0A2C84C138EE"}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "896273C9-11F9-45A0-BA46-66F37DFACCC7"}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AF396289-8409-4FE2-96DB-99818D5680B4"}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6E60ABB-E703-4745-98F3-22609FF70F6F"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}