Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2009-0880
HistoryMar 12, 2009 - 3:20 p.m.

CVE-2009-0880

2009-03-1215:20:49
CWE-22
mitre
web.nvd.nist.gov
45
ibm director
cve-2009-0880
directory traversal
cim server
windows
vulnerability
nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.405

Percentile

97.3%

JSON

Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a … (dot dot) in a /CIMListener/ URI in an M-POST request.

Affected configurations

Nvd
Node
ibmdirectorRange≤5.20.3service_update_1
OR
ibmdirectorMatch3.1.1
OR
ibmdirectorMatch4.10
OR
ibmdirectorMatch4.11
OR
ibmdirectorMatch4.12
OR
ibmdirectorMatch4.20
OR
ibmdirectorMatch4.21
OR
ibmdirectorMatch4.22
OR
ibmdirectorMatch5.10.0
OR
ibmdirectorMatch5.10.1
OR
ibmdirectorMatch5.10.2
OR
ibmdirectorMatch5.10.3
OR
ibmdirectorMatch5.20.0
OR
ibmdirectorMatch5.20.1
OR
ibmdirectorMatch5.20.2
AND
microsoftwindows
VendorProductVersionCPE
ibmdirector*cpe:2.3:a:ibm:director:*:service_update_1:*:*:*:*:*:*
ibmdirector3.1.1cpe:2.3:a:ibm:director:3.1.1:*:*:*:*:*:*:*
ibmdirector4.10cpe:2.3:a:ibm:director:4.10:*:*:*:*:*:*:*
ibmdirector4.11cpe:2.3:a:ibm:director:4.11:*:*:*:*:*:*:*
ibmdirector4.12cpe:2.3:a:ibm:director:4.12:*:*:*:*:*:*:*
ibmdirector4.20cpe:2.3:a:ibm:director:4.20:*:*:*:*:*:*:*
ibmdirector4.21cpe:2.3:a:ibm:director:4.21:*:*:*:*:*:*:*
ibmdirector4.22cpe:2.3:a:ibm:director:4.22:*:*:*:*:*:*:*
ibmdirector5.10.0cpe:2.3:a:ibm:director:5.10.0:*:*:*:*:*:*:*
ibmdirector5.10.1cpe:2.3:a:ibm:director:5.10.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 161

Related

securityvulns 2
nvd 1
openvas 2
zdt 2
seebug 2
packetstorm 2
exploitpack 1
prion 1
exploitdb 3
cvelist 1
metasploit 1
kaspersky 1
securityvulns
securityvulns
IBM Director code execution
2012-12-09 00:00:00
IBM System Director Remote System Level Exploit (CVE-2009-0880 extended zeroday)
2012-12-09 00:00:00
nvd
nvd
CVE-2009-0880
2009-03-12 15:20:49
openvas
openvas
IBM Director CIM Server CIMListener Directory Traversal Vulnerability - Active Check
2012-12-11 00:00:00
IBM Director CIM Server CIMListener Directory Traversal Vulnerability (Windows)
2012-12-11 00:00:00
zdt
zdt
IBM System Director Agent DLL Injection Vulnerability
2012-12-07 00:00:00
IBM System Director Remote System Level Exploit
2012-12-02 00:00:00
seebug
seebug
IBM Director CIM服务器本地权限提升漏洞
2009-03-14 00:00:00
IBM System Director Remote System Level Exploit
2014-07-01 00:00:00
packetstorm
packetstorm
IBM System Director Agent DLL Injection
2012-12-07 00:00:00
IBM System Director Remote DLL Load
2012-12-03 00:00:00
exploitpack
exploitpack
IBM System Director Agent - Remote System Level
2012-12-02 00:00:00
prion
prion
Directory traversal
2009-03-12 15:20:00
exploitdb
exploitdb
IBM System Director Agent 5.20 - CIM Server Privilege Escalation
2009-03-10 00:00:00
IBM System Director Agent - Remote System Level
2012-12-02 00:00:00
IBM System Director Agent - DLL Injection (Metasploit)
2012-12-07 00:00:00
cvelist
cvelist
CVE-2009-0880
2009-03-12 15:00:00
metasploit
metasploit
IBM System Director Agent DLL Injection
2012-12-06 15:43:07
kaspersky
kaspersky
KLA10198 Multiple vulnerabilities in IBM Director
2009-03-12 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.405

Percentile

97.3%

JSON
Related for CVE-2009-0880
securityvulns2nvd1openvas2zdt2seebug2packetstorm2exploitpack1prion1exploitdb3cvelist1metasploit1kaspersky1