6.8
CVSSv2

CVE-2009-0880

Published: 12/03/2009 Updated: 10/10/2018
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 690
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Directory traversal vulnerability in the CIM server in IBM Director prior to 5.20.3 Service Update 2 on Windows allows remote malicious users to load and execute arbitrary local DLL code via a .. (dot dot) in a /CIMListener/ URI in an M-POST request.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm director 5.20.2

ibm director 5.20.1

ibm director 4.12

ibm director 4.10

ibm director 5.10.1

ibm director 5.10.0

ibm director 4.22

ibm director 5.10.2

ibm director 4.11

ibm director 4.21

ibm director 4.20

ibm director 5.20.0

ibm director 5.10.3

ibm director 3.1.1

ibm director

Exploits

By sending a specially crafted request to a vulnerable IBM System Director sever, an attacker can force it to load a DLL remotely from a WebDAV share Versions 5203 and below are vulnerable ...
IBM System Director Remote System Level Exploit (CVE-2009-0880 extended zeroday) Copyright (C) 2012 Kingcope IBM System Director has the port 6988 open By using a special request to a vulnerable server, the attacker can force to load a dll remotely from a WebDAV share The following exploit will load the dll from \\isowarezde\\director\wootwoot ...
## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # web site for more information on licensing and terms of use # metasploitcom/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit ...