CVE-2009-3900 - Unspecified vulnerability in the Cluster Management component in IBM PowerHA 5.4, 5.4.1, 5.5, and 6.

CVE-2009-3900

Summary

Unspecified vulnerability in the Cluster Management component in IBM PowerHA 5.4, 5.4.1, 5.5, and 6.1 on AIX allows remote attackers to modify the operating-system configuration via packets to the godm port (6177/tcp).

References

Vulnerable Configurations

cpe:2.3:a:ibm:powerha:5.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:powerha:5.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:powerha:5.4.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:powerha:5.4.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:powerha:5.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:powerha:5.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:powerha:6.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:powerha:6.1:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*

CVSS

Base:	7.8 (as of 17-08-2017 - 01:31)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	COMPLETE	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:C/A:N

refmap via4

aixapar	IZ61323 IZ61325 IZ62630
bid	36931
confirm	http://aix.software.ibm.com/aix/efixes/security/haport_advisory.asc
secunia	37267
vupen	ADV-2009-3153
xf	aix-powerha-unauth-access(54154)

Last major update

17-08-2017 - 01:31

Published

06-11-2009 - 15:30

Last modified

17-08-2017 - 01:31