CVE-2009-2582

2009-07-2320:30:00

CWE-119

mitre

web.nvd.nist.gov

cve-2009-2582

akamai download manager

dlm

dlmanager

buffer overflow

remote code execution

http response

vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.349

Percentile

97.1%

JSON

Stack-based buffer overflow in manager.exe in Akamai Download Manager (aka DLM or dlmanager) before 2.2.4.8 allows remote web servers to execute arbitrary code via a malformed HTTP response during a Redswoosh download, a different vulnerability than CVE-2007-1891 and CVE-2007-1892.

Affected configurations

Nvd

Node

akamai_technologiesdownload_managerRange≤2.2.4.3

akamai_technologiesdownload_managerMatch2.0.4.4

akamai_technologiesdownload_managerMatch2.2.0.0

akamai_technologiesdownload_managerMatch2.2.1.0

akamai_technologiesdownload_managerMatch2.2.3.5

akamai_technologiesdownload_managerMatch2.2.3.6

VendorProductVersionCPE
akamai_technologiesdownload_manager*cpe:2.3:a:akamai_technologies:download_manager:*:*:*:*:*:*:*:*
akamai_technologiesdownload_manager2.0.4.4cpe:2.3:a:akamai_technologies:download_manager:2.0.4.4:*:*:*:*:*:*:*
akamai_technologiesdownload_manager2.2.0.0cpe:2.3:a:akamai_technologies:download_manager:2.2.0.0:*:*:*:*:*:*:*
akamai_technologiesdownload_manager2.2.1.0cpe:2.3:a:akamai_technologies:download_manager:2.2.1.0:*:*:*:*:*:*:*
akamai_technologiesdownload_manager2.2.3.5cpe:2.3:a:akamai_technologies:download_manager:2.2.3.5:*:*:*:*:*:*:*
akamai_technologiesdownload_manager2.2.3.6cpe:2.3:a:akamai_technologies:download_manager:2.2.3.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
akamai_technologies	download_manager	*	cpe:2.3:a:akamai_technologies:download_manager::::::::
akamai_technologies	download_manager	2.0.4.4	cpe:2.3:a:akamai_technologies:download_manager:2.0.4.4:::::::*
akamai_technologies	download_manager	2.2.0.0	cpe:2.3:a:akamai_technologies:download_manager:2.2.0.0:::::::*
akamai_technologies	download_manager	2.2.1.0	cpe:2.3:a:akamai_technologies:download_manager:2.2.1.0:::::::*
akamai_technologies	download_manager	2.2.3.5	cpe:2.3:a:akamai_technologies:download_manager:2.2.3.5:::::::*
akamai_technologies	download_manager	2.2.3.6	cpe:2.3:a:akamai_technologies:download_manager:2.2.3.6:::::::*