CVE-2009-2582

2009-07-2320:30:00

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.349

Percentile

97.1%

JSON

Stack-based buffer overflow in manager.exe in Akamai Download Manager (aka DLM or dlmanager) before 2.2.4.8 allows remote web servers to execute arbitrary code via a malformed HTTP response during a Redswoosh download, a different vulnerability than CVE-2007-1891 and CVE-2007-1892.

Affected configurations

Nvd

Node

akamai_technologiesdownload_managerRange≤2.2.4.3

akamai_technologiesdownload_managerMatch2.0.4.4

akamai_technologiesdownload_managerMatch2.2.0.0

akamai_technologiesdownload_managerMatch2.2.1.0

akamai_technologiesdownload_managerMatch2.2.3.5

akamai_technologiesdownload_managerMatch2.2.3.6

VendorProductVersionCPE
akamai_technologiesdownload_manager*cpe:2.3:a:akamai_technologies:download_manager:*:*:*:*:*:*:*:*
akamai_technologiesdownload_manager2.0.4.4cpe:2.3:a:akamai_technologies:download_manager:2.0.4.4:*:*:*:*:*:*:*
akamai_technologiesdownload_manager2.2.0.0cpe:2.3:a:akamai_technologies:download_manager:2.2.0.0:*:*:*:*:*:*:*
akamai_technologiesdownload_manager2.2.1.0cpe:2.3:a:akamai_technologies:download_manager:2.2.1.0:*:*:*:*:*:*:*
akamai_technologiesdownload_manager2.2.3.5cpe:2.3:a:akamai_technologies:download_manager:2.2.3.5:*:*:*:*:*:*:*
akamai_technologiesdownload_manager2.2.3.6cpe:2.3:a:akamai_technologies:download_manager:2.2.3.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
akamai_technologies	download_manager	*	cpe:2.3:a:akamai_technologies:download_manager::::::::
akamai_technologies	download_manager	2.0.4.4	cpe:2.3:a:akamai_technologies:download_manager:2.0.4.4:::::::*
akamai_technologies	download_manager	2.2.0.0	cpe:2.3:a:akamai_technologies:download_manager:2.2.0.0:::::::*
akamai_technologies	download_manager	2.2.1.0	cpe:2.3:a:akamai_technologies:download_manager:2.2.1.0:::::::*
akamai_technologies	download_manager	2.2.3.5	cpe:2.3:a:akamai_technologies:download_manager:2.2.3.5:::::::*
akamai_technologies	download_manager	2.2.3.6	cpe:2.3:a:akamai_technologies:download_manager:2.2.3.6:::::::*