CVE-2009-1173: Low severity IBM WebSphere Application Server Feature Pack for Web Services vulnerability
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3 uses weak permissions (777) for files associated with unspecified "interim fixes," which allows attackers to modify files that would not have been accessible if the intended 755 permissions were used.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Locate files associated with interim fixes for WAS 7.0 and change their filesystem permissions from 777 to 755 (for example, run: chmod 0755 <file> on each affected file) to remove world-writable permission and restore intended access controls.
IBM WebSphere Application Server 7.0 (Feature Pack for Web Services) file_permissions_for_interim_fix_files = 755
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1173?
CVE-2009-1173 is considered a moderate severity vulnerability due to weak file permissions allowing unauthorized access.
How do I fix CVE-2009-1173?
To fix CVE-2009-1173, change the file permissions from 777 to the secure setting of 755 for the affected files.
Which versions of IBM WebSphere Application Server are affected by CVE-2009-1173?
CVE-2009-1173 affects IBM WebSphere Application Server version 7.0 and version 7.0.0.1.
What type of attack is possible with CVE-2009-1173?
CVE-2009-1173 allows attackers to modify files due to excessively permissive file permissions.
Is there a patch available for CVE-2009-1173?
Yes, IBM releases interim fixes that include patches to address the vulnerabilities associated with CVE-2009-1173.