Skip to content
OpenAdvisories
High · 8.4 CVE-2020-4587 EUVD-2020-25834GHSA-qvjf-c3cc-2mpj

IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper boun…

Published Aug 24, 2020 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper bounds checking. A local attacker could manipulate CD UNIX to obtain root provileges. IBM X-Force ID: 184578.

Affected products

VendorProductAffectedFixed
IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0 —
IBM Connect:Direct for UNIX 6.1.0, 6.0.0 —

References