« Back to list

CVE-2009-0505

Status: ModifiedHigh (9)—

The CICS listener in IBM TXSeries for Multiplatforms 6.2 GA waits for a forcepurge acknowledgement from the CICS Application Server (CICSAS) after an eci response timeout, which might allow remote authenticated users to cause a denial of service (forcepurge handling delay), or have unspecified other impact, via vectors involving slow or nonexistent acknowledgement.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

IBM — Txseries

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2009-0505",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": true,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-02-25T16:30:00.360",
  "references": [
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg24019725",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ22391",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/33883",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/0911",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48885",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg24019725",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ22391",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/33883",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/0911",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48885",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The CICS listener in IBM TXSeries for Multiplatforms 6.2 GA waits for a forcepurge acknowledgement from the CICS Application Server (CICSAS) after an eci response timeout, which might allow remote authenticated users to cause a denial of service (forcepurge handling delay), or have unspecified other impact, via vectors involving slow or nonexistent acknowledgement."
    },
    {
      "lang": "es",
      "value": "El listener CICS en IBM TXSeries para Multiplatforms 6.2 GA espera por un acuse de recibo \"forcepurge\" desde CICS Application Server (CICSAS) después de la finalización del tiempo de respuesta eci, lo que debería permitir a los usuarios remotos autenticados causar una denegación de servicios (demora en la manipulación de \"forcepurge\"), o tener otro impacto no especificado, a través de vectores que implican un lento o no existente acuse de recibo."
    }
  ],
  "lastModified": "2026-06-16T23:05:11.037",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:txseries:6.2:-:aix:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35A53AA4-11A3-4274-9C7C-1AEB1C903E72"
            },
            {
              "criteria": "cpe:2.3:a:ibm:txseries:6.2:-:ga:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D4715FA-08F2-41BA-B5D3-D77BB8153E4B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:txseries:6.2:-:hp-ia:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "546BE6B7-EEF7-4F3B-8829-19954C03BBE6"
            },
            {
              "criteria": "cpe:2.3:a:ibm:txseries:6.2:-:hp-ux:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA4F1282-DD92-4ADA-AB93-55E7A8E513BB"
            },
            {
              "criteria": "cpe:2.3:a:ibm:txseries:6.2:-:solaris:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "875CC6DB-B368-4E02-8316-C8090A099960"
            },
            {
              "criteria": "cpe:2.3:a:ibm:txseries:6.2:-:windows:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5227061-2047-4655-A868-6F87B6DBC0EC"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}