Vulnerability Details CVE-2009-0120
The IBM WebSphere DataPower XML Security Gateway XS40 with firmware 3.6.1.5 allows remote attackers to cause a denial of service (device reboot) by sending data over an established SSL connection, as demonstrated by the abc\r\n\r\n string data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.061
EPSS Ranking 90.4%
CVSS Severity
CVSS v2 Score 7.8
References
- http://securityreason.com/securityalert/4911
- http://www.securityfocus.com/archive/1/499870/100/0/threaded
- http://www.securityfocus.com/bid/33169
- http://www.securitytracker.com/id?1021547
- http://www.vupen.com/english/advisories/2009/0111
- http://securityreason.com/securityalert/4911
- http://www.securityfocus.com/archive/1/499870/100/0/threaded
- http://www.securityfocus.com/bid/33169
- http://www.securitytracker.com/id?1021547
- http://www.vupen.com/english/advisories/2009/0111
Products affected by CVE-2009-0120
-
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.6.1.5