CVE-2009-0436
N/A
Published: February 10, 2009 at 10:13 PM UTC
Updated: June 16, 2026 at 11:05 PM UTC
1 product affected across 1 vendorWebSphere Application Server
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.4%
Description
The (1) mod_ibm_ssl and (2) mod_cgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as used in WebSphere Application Server (WAS), set incorrect permissions for AF_UNIX sockets, which has unknown impact and local attack vectors.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
6.06.0.0.16.0.0.26.0.0.36.0.16.0.1.16.0.1.116.0.1.136.0.1.156.0.1.176.0.1.26.0.1.36.0.1.56.0.1.76.0.1.96.0.26.0.2.16.0.2.116.0.2.136.0.2.156.0.2.176.0.2.196.0.2.26.0.2.226.0.2.236.0.2.246.0.2.256.0.2.276.0.2.286.0.2.296.0.2.36.0.2.306.0.2.46.0.2.56.0.2.66.0.2.76.0.2.96.16.1.06.1.0.06.1.0.16.1.0.106.1.0.116.1.0.126.1.0.136.1.0.146.1.0.156.1.0.166.1.0.176.1.0.186.1.0.26.1.0.36.1.0.46.1.0.56.1.0.66.1.0.76.1.0.86.1.0.96.1.13
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (7)
x_refsource_MISCx_refsource_CONFIRMPatch
Source: [email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg27006876x_refsource_CONFIRMPatch
Source: [email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg27007033x_refsource_CONFIRMx_refsource_MISCPatchVendor Advisory
Source: [email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg27007951x_refsource_CONFIRMPatch
Source: [email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg27008517Vendor Advisoryx_refsource_AIXAPARPatch
Source: [email protected]
http://www-1.ibm.com/support/docview.wss?uid=swg1PK66154VDB Entryx_refsource_XF
Source: [email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/48526Quick Info
StatusMODIFIED
CWE
CWE-264
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card