Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 09/03/2008 Updated: 15/11/2008

CVSS v2 Base Score: 3.3 | Impact Score: 4.9 | Exploitability Score: 3.4

VMScore: 294

Vector: AV:L/AC:M/Au:N/C:N/I:P/A:P

The WebSphere MQ XA 5.3 before FP13 and 6.0.x prior to 6.0.2.1 client for Windows, when running in an MTS or a COM+ environment, grants the PROCESS_DUP_HANDLE privilege to the Everyone group upon connection to a queue manager, which allows local users to duplicate an arbitrary handle and possibly hijack an arbitrary process.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ibm websphere mq

CWE-264 http://www-1.ibm.com/support/docview.wss?uid=swg1IC50431 http://securitytracker.com/id?1019529 http://osvdb.org/43167 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-6705

Vulnerability Summary

References

Vulmon Search

About

Products

Connect