CVE-2009-1173 - IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3 uses weak permissions (777) for files associated with unspecified "interim fixes," which allows attackers to modify files that would not have been accessible if the intended 755 permissions were used

Back Back to CVE browser

LOW

IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3 uses weak permissions (777) for files associated with unspecified "interim fixes," which allows attackers to modify files that would not have been accessible if the intended 755 permissions were used

Published Mar 31, 2009

2.1

LOW

CVSS 2.0

EPSS 0.34%

Description

IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3 uses weak permissions (777) for files associated with unspecified "interim fixes," which allows attackers to modify files that would not have been accessible if the intended 755 permissions were used.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (7)

http://secunia.com/advisories/34131
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34461
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PK77590
vendor-advisoryx_refsource_AIXAPAR
http://www-01.ibm.com/support/docview.wss?uid=swg1PK82988
vendor-advisoryx_refsource_AIXAPAR
http://www-01.ibm.com/support/docview.wss?uid=swg27014463
x_refsource_CONFIRMPatch
http://www.securityfocus.com/bid/34259
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2009/0854
vdb-entryx_refsource_VUPENPatchVendor Advisory

Link	Providers	Tags
http://secunia.com/advisories/34131		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34461		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PK77590		vendor-advisoryx_refsource_AIXAPAR
http://www-01.ibm.com/support/docview.wss?uid=swg1PK82988		vendor-advisoryx_refsource_AIXAPAR
http://www-01.ibm.com/support/docview.wss?uid=swg27014463		x_refsource_CONFIRMPatch
http://www.securityfocus.com/bid/34259		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2009/0854		vdb-entryx_refsource_VUPENPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 31, 2009

Updated Aug 7, 2024

Reserved Mar 30, 2009

Link CVE-2009-1173

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-1173

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-1173