PT-2009-3471
CVE-2009-0879
·
Published
2009-03-12
·
Updated
2018-10-10
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
IBM Director versions prior to 5.20.3 Service Update 2
Description
The issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This can be achieved by sending an M-POST request to a long "http://example.com/CIMListener/" URI with a long consumer name, such as a long
consumer name variable.Recommendations
For versions prior to 5.20.3 Service Update 2, update to version 5.20.3 Service Update 2 to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾