CVE-2009-20005 InterSystems Caché UtilConfigHome.csp Stack Buffer Overflow
CriticalCVSS 9.3
EPSS 2.4%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
A stack-based buffer overflow exists in the UtilConfigHome.csp endpoint of InterSystems Caché 2009.1. The vulnerability is triggered by sending a specially crafted HTTP GET request containing an oversized argument to the .csp handler. Due to insufficient bounds checking, the input overflows a stack buffer, allowing an attacker to overwrite control structures and execute arbitrary code. It is unknown if this vulnerability was patched and an affected version range remains undefined.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| InterSystems Caché | <= 2009.1 | No fix listed |
References
- raw.githubusercontent.com exploit
- www.exploit-db.com exploit
- www.juniper.net third-party-advisory
- www.intersystems.com product
- www.vulncheck.com third-party-advisory