CVE-2020-4587

Published: Aug 24, 2020Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper bounds checking. A local attacker could manipulate CD UNIX to obtain root provileges. IBM X-Force ID: 184578.

Affected (4)

Products: Ibm: Connect\, Sterling Connect\

Ibm

2 products

Connect\

Sterling Connect\

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Connect\	Version direct 6.0.0
Ibm Connect\	Version direct 6.1.0
Ibm Sterling Connect\	Version direct 4.2.0
Ibm Sterling Connect\	Version direct 4.3.0

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/184578

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6320317

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/184578

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6320317

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.