NVD

Id
47768  
Name
CVE-2009-0436  
Description
The (1) mod_ibm_ssl and (2) mod_cgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as used in WebSphere Application Server (WAS), set incorrect permissions for AF_UNIX sockets, which has unknown impact and local attack vectors.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-02-10  
Modified Date
2009-06-17  
Seq
2009-0436  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
239377 47768 CVE-2009-0436 http://www-01.ibm.com/support/docview.wss?uid=swg27006876  View
239378 47768 CVE-2009-0436 http://www-01.ibm.com/support/docview.wss?uid=swg27007033  View
239379 47768 CVE-2009-0436 http://www-01.ibm.com/support/docview.wss?uid=swg27007951  View
239380 47768 CVE-2009-0436 http://www-01.ibm.com/support/docview.wss?uid=swg27008517  View
239381 47768 CVE-2009-0436 33700  View
239382 47768 CVE-2009-0436 websphere-http-afunix-incorrect-permissions(48526)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43444 JVNDB-2009-004451 WAS で使用される IBM HTTP Server の mod_ibm_ssl モジュールなどにおける脆弱性 WebSphere Application Server (WAS) で使用される IBM HTTP Server の (1) mod_ibm_ssl および (2) mod_cgid モジュールは、AF_UNIX ソケットに誤ったパーミッションを設定するため、不特定の影響を受ける脆弱性が存在します。 CVE-2009-0436 37867 CVE-2009-0436 47768 7.2 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004451.html 2009-02-10 2012-09-25 View