CVE-2009-1174

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 and 7.0 before 7.0.0.3 has an unspecified "security problem" in the XML digital-signature specification, which has unknown impact and attack vectors.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-310

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/34131
http://secunia.com/advisories/34461
http://secunia.com/advisories/35301
http://www-01.ibm.com/support/docview.wss?uid=swg1PK80596Not Applicable
http://www-01.ibm.com/support/docview.wss?uid=swg21384925Patch, Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg27006876Patch
http://www-01.ibm.com/support/docview.wss?uid=swg27014463Patch
http://www.securityfocus.com/bid/34506Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2009/1464Permissions Required
http://secunia.com/advisories/34131
http://secunia.com/advisories/34461
http://secunia.com/advisories/35301
http://www-01.ibm.com/support/docview.wss?uid=swg1PK80596Not Applicable
http://www-01.ibm.com/support/docview.wss?uid=swg21384925Patch, Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg27006876Patch
http://www-01.ibm.com/support/docview.wss?uid=swg27014463Patch
http://www.securityfocus.com/bid/34506Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2009/1464Permissions Required

Timeline

Published: Mar 31, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2009

CVE-2009-11754.3Cross-site scripting (XSS) vulnerability in apps/web/vs_diag.cgi in the DAAP extension in Banshee 1.4.2 allows remote attackers to inject ar CVE-2009-117610.0mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the string holding the id parameter ends in a CVE-2009-117710.0Multiple stack-based buffer overflows in maptemplate.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 have unknown impact an CVE-2009-117810.0Unspecified vulnerability in the server in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.2 and 6.x before 6.1 has unknown impact and att CVE-2009-11796.8Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows CVE-2009-11806.8The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to CVE-2009-11814.3The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to CVE-2009-11827.5Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other pro CVE-2009-11834.3The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers CVE-2009-11844.4The selinux_ip_postroute_iptables_compat function in security/selinux/hooks.c in the SELinux subsystem in the Linux kernel before 2.6.27.22,CVE-2009-11857.2udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sen CVE-2009-11862.1Buffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev before 1.4.1 allows local users to cause a denial of ser