Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-1786

EPSS 0.16% · P36
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-1786

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The malloc subsystem in libc in IBM AIX 5.3 and 6.1 allows local users to create or overwrite arbitrary files via a symlink attack on the log file associated with the MALLOCDEBUG environment variable.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
IBM AIX libc MALLOCDEBUG文件覆盖漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM AIX是一款商业性质的UNIX操作系统。 AIX的libc在实现malloc时包含有一个调试机制，可通过设置MALLOCTYPE和MALLOCDEBUG环境变量来初始化这个机制。在某些情况下调试功能会对用户指定的日志文件执行写操作，而在检查文件是否为符号链接与打开文件的过程中存在一个时间差。如果攻击者能够在这个时间帧内将文件更改为指向其他文件的符号链接的话，就可以导致set-uid二进制程序向属于特权用户的文件执行写操作。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-1786

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-1786

请登录查看更多情报信息。

Same Patch Batch · n/a · 2009-05-26 · 17 CVEs total

CVE-2009-1796Sun Java System Portal Server 错误信息页面跨站脚本攻击漏洞
CVE-2008-3869Sun Solaris admind守护程序堆溢出漏洞
CVE-2008-3870Sun Solaris sadmind守护程序整数溢出漏洞
CVE-2009-1791Mega-Nerd libsndfile库VOC和AIFF文件解析多个堆溢出漏洞
CVE-2009-1787PHP Dir Submit Admin Login SQL注入漏洞
CVE-2009-1788Mega-Nerd libsndfile库VOC和AIFF文件解析多个堆溢出漏洞
CVE-2009-1789Eggdrop 'ctcpbuf' 远程拒绝服务漏洞
CVE-2009-1790CGI RESCUE Trees 跨站脚本攻击漏洞
CVE-2009-1373Pidgin 缓冲区错误漏洞
CVE-2009-1374Pidgin decrypt_out功能栈溢出漏洞
CVE-2009-1375Pidgin PurpleCircBuffer结构边界条件错误漏洞
CVE-2009-1376Pidgin 数字错误漏洞
CVE-2009-1476IPFilter lib/load_http.c文件缓冲区溢出漏洞
CVE-2009-1634Novell GroupWise WebAccess gw/webacc多个跨站脚本漏洞
CVE-2009-1636Novell GroupWise Internet代理邮件地址处理缓冲区溢出漏洞
CVE-2009-1754Android'services/java/com/android/server/PackageManagerService.java'本地特权升级漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-1786

No comments yet

Leave a comment