CVE-2009-0120

Published: Jan 15, 2009Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The IBM WebSphere DataPower XML Security Gateway XS40 with firmware 3.6.1.5 allows remote attackers to cause a denial of service (device reboot) by sending data over an established SSL connection, as demonstrated by the abc\r\n\r\n string data.

Affected (1)

Products: Ibm: Websphere Datapower Xml Security Gateway Xs40

Ibm

1 product

Websphere Datapower Xml Security Gateway Xs40

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Datapower Xml Security Gateway Xs40	Version 3.6.1.5

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (10)

http://securityreason.com/securityalert/4911

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/499870/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/33169

Source: cve@mitre.org

Exploit

http://www.securitytracker.com/id?1021547

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/0111

Source: cve@mitre.org

http://securityreason.com/securityalert/4911