« Volver al listado

CVE-2009-0505

Estado: ModificadaAlta (9)—

El listener CICS en IBM TXSeries para Multiplatforms 6.2 GA espera por un acuse de recibo "forcepurge" desde CICS Application Server (CICSAS) después de la finalización del tiempo de respuesta eci, lo que debería permitir a los usuarios remotos autenticados causar una denegación de servicios (demora en la manipulación de "forcepurge"), o tener otro impacto no especificado, a través de vectores que implican un lento o no existente acuse de recibo.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Txseries

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-0505",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": true,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-02-25T16:30:00.360",
  "references": [
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg24019725",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ22391",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/33883",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/0911",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48885",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg24019725",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ22391",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/33883",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/0911",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48885",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The CICS listener in IBM TXSeries for Multiplatforms 6.2 GA waits for a forcepurge acknowledgement from the CICS Application Server (CICSAS) after an eci response timeout, which might allow remote authenticated users to cause a denial of service (forcepurge handling delay), or have unspecified other impact, via vectors involving slow or nonexistent acknowledgement."
    },
    {
      "lang": "es",
      "value": "El listener CICS en IBM TXSeries para Multiplatforms 6.2 GA espera por un acuse de recibo \"forcepurge\" desde CICS Application Server (CICSAS) después de la finalización del tiempo de respuesta eci, lo que debería permitir a los usuarios remotos autenticados causar una denegación de servicios (demora en la manipulación de \"forcepurge\"), o tener otro impacto no especificado, a través de vectores que implican un lento o no existente acuse de recibo."
    }
  ],
  "lastModified": "2026-06-16T23:05:11.037",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:txseries:6.2:-:aix:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35A53AA4-11A3-4274-9C7C-1AEB1C903E72"
            },
            {
              "criteria": "cpe:2.3:a:ibm:txseries:6.2:-:ga:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D4715FA-08F2-41BA-B5D3-D77BB8153E4B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:txseries:6.2:-:hp-ia:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "546BE6B7-EEF7-4F3B-8829-19954C03BBE6"
            },
            {
              "criteria": "cpe:2.3:a:ibm:txseries:6.2:-:hp-ux:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA4F1282-DD92-4ADA-AB93-55E7A8E513BB"
            },
            {
              "criteria": "cpe:2.3:a:ibm:txseries:6.2:-:solaris:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "875CC6DB-B368-4E02-8316-C8090A099960"
            },
            {
              "criteria": "cpe:2.3:a:ibm:txseries:6.2:-:windows:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5227061-2047-4655-A868-6F87B6DBC0EC"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}