« Volver al listado

CVE-2009-0210

Estado: ModificadaAlta (10)—

Buffer overflow in the MLF application in AREVA e-terrahabitat 5.7 and earlier allows remote attackers to execute arbitrary commands or cause a denial of service (system crash) via unspecified vectors, aka PD28578.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Areva — E-terrahabitat

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-0210",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": true,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-02-08T22:30:00.233",
  "references": [
    {
      "url": "http://secunia.com/advisories/33837",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/337569",
      "tags": [
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.scada-security.com/vulnerabilities/areva1.html",
      "tags": [
        "URL Repurposed"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/500689/100/0/threaded",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/33637",
      "source": "cret@cert.org"
    },
    {
      "url": "http://secunia.com/advisories/33837",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/337569",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.scada-security.com/vulnerabilities/areva1.html",
      "tags": [
        "URL Repurposed"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/500689/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/33637",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in the MLF application in AREVA e-terrahabitat 5.7 and earlier allows remote attackers to execute arbitrary commands or cause a denial of service (system crash) via unspecified vectors, aka PD28578."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en la aplicación MLF en AREVA e-terrahabitat v5.7 y anteriores, permite a atacantes remotos ejecutar comandos de su elección o provocar una denegación de servicio (caída del sistema) a través de vectores no especificados. También conocidos como PD28578."
    }
  ],
  "lastModified": "2026-06-16T23:04:30.307",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:areva:e-terrahabitat:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "81433ED5-61A7-406A-BCEA-C0FB80B4B374",
              "versionEndIncluding": "5.7"
            },
            {
              "criteria": "cpe:2.3:a:areva:e-terrahabitat:5.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A8C5CBA7-E0D6-4C2B-AD9F-16707B084C31"
            },
            {
              "criteria": "cpe:2.3:a:areva:e-terrahabitat:5.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "00DA6AF7-707F-476F-B204-B6BD870762D0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cret@cert.org",
  "evaluatorSolution": "Per http://www.kb.cert.org/vuls/id/337569 \r\n\r\n\"III. Solution \r\n\r\nApply Patch Users of e-terrahabitat version 5.5, 5.6, and 5.7 should apply the e-terrahabitat_560_P20081030_SEC patch immediately.\""
}