CVE-2009-20005: InterSystems Caché UtilConfigHome.csp Stack Buffer Overflow
A stack-based buffer overflow exists in the UtilConfigHome.csp endpoint of InterSystems Caché 2009.1. The vulnerability is triggered by sending a specially crafted HTTP GET request containing an oversized argument to the .csp handler. Due to insufficient bounds checking, the input overflows a stack buffer, allowing an attacker to overwrite control structures and execute arbitrary code. It is unknown if this vulnerability was patched and an affected version range remains undefined.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-20005?
CVE-2009-20005 is classified as a critical vulnerability due to its potential for exploitation through buffer overflow attacks.
How does CVE-2009-20005 occur?
CVE-2009-20005 occurs when an oversized argument is sent via an HTTP GET request to the UtilConfigHome.csp endpoint, leading to a stack-based buffer overflow.
What systems are affected by CVE-2009-20005?
CVE-2009-20005 affects InterSystems Caché version 2009.1 due to inadequate bounds checking in its .csp handler.
How can I mitigate CVE-2009-20005?
To mitigate CVE-2009-20005, ensure that network protections are in place and consider upgrading to a patched version of InterSystems Caché.
Is there an exploit available for CVE-2009-20005?
Yes, there are known exploits for CVE-2009-20005 that can leverage the vulnerability for unauthorized actions.