CVE-2009-0879

The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of service (daemon crash) via a long consumer name, as demonstrated by an M-POST request to a long /CIMListener/ URI.

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

8.22% chance of exploitation in the next 30 days, 95th percentile

Published

2009-03-12

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/8190

Security advisories

• http://secunia.com/advisories/34212
• http://securitytracker.com/id?1021825
• http://www.vupen.com/english/advisories/2009/0656
• https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=dmp&S_PKG=director_x…
• http://www.securityfocus.com/bid/34061

References

• CVE Record
• NVD entry