NVD

Id
50719  
Name
CVE-2009-3518  
Description
Argument injection vulnerability in the iim: URI handler in IBMIM.exe in IBM Installation Manager 1.3.2 and earlier, as used in IBM Rational Robot and Rational Team Concert, allows remote attackers to load arbitrary DLL files via the -vm option, as demonstrated by a reference to a UNC share pathname.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-10-01  
Modified Date
2009-10-02  
Seq
2009-3518  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
256271 50719 CVE-2009-3518 http://retrogod.altervista.org/9sg_ibm_uri.html  View
256272 50719 CVE-2009-3518 ADV-2009-2792  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44015 JVNDB-2009-005022 IBM Rational Robot などの IBM Installation Manager における DLL ファイルをロードされる脆弱性 IBM Rational Robot および Rational Team Concert に使用される IBM Installation Manager の iim: URI ハンドラは、引数の挿入により、任意の DLL ファイルをロードされる脆弱性が存在します。 CVE-2009-3518 40949 CVE-2009-3518 50719 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005022.html 2009-10-01 2012-09-25 View