CVEvulnerability
CVE-2009-1173
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2009-03-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3 uses weak permissions (777) for files associated with unspecified "interim fixes," which allows attackers to modify files that would not have been accessible if the intended 755 permissions were used.
Affected configurations
• ibm websphere application server 7.0
• ibm websphere application server 7.0.0.1
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/34131 secunia.com
- http://secunia.com/advisories/34461 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK77590 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK82988 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg27014463 Patch
- http://www.securityfocus.com/bid/34259 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/0854 Patch, Vendor Advisory
- http://secunia.com/advisories/34131 secunia.com
- http://secunia.com/advisories/34461 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK77590 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK82988 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg27014463 Patch
- http://www.securityfocus.com/bid/34259 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/0854 Patch, Vendor Advisory