CVE

Id
37875  
CVE No.
CVE-2009-0440  
Status
Candidate  
Description
IBM WebSphere Partner Gateway (WPG) 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated users to submit a crafted RosettaNet (aka RNIF) document to a backend application, related to (1) "altered service content" and (2) "digital signature foot-print."  
Phase
Assigned (20090205)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
411467 37875 CVE-2009-0440 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21330341  View
411468 37875 CVE-2009-0440 AIXAPAR:JR31231  View
411469 37875 CVE-2009-0440 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1JR31231  View
411470 37875 CVE-2009-0440 BID:33839  View
411471 37875 CVE-2009-0440 URL:http://www.securityfocus.com/bid/33839  View
411472 37875 CVE-2009-0440 SECUNIA:33994  View
411473 37875 CVE-2009-0440 URL:http://secunia.com/advisories/33994  View
411474 37875 CVE-2009-0440 XF:websphere-pgateway-rnif-signatures(48530)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44784 JVNDB-2009-005791 GRBoard における PHP リモートファイルインクルージョンの脆弱性 GRBoard には、register_globals が有効になっている、および magic_quotes_gpc が無効になっている際、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2009-0444 37875 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005791.html  View