VRDA Feed by JPCERT/CC
  Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis
[ about VRDA Feed | JPCERT/CC



 
Vulnerability Analysis Result (Revision No : 1) [ Download XML
VRDA-091214-001
InterSystems Cache and Ensemble CSP Gateway Buffer Overflow Vulnerability
http://www.intersystems.com/support/cflash/2009announce.html

InterSystems has corrected a security defect that an attacker could exploit to gain complete control of a system through the CSP Gateway.




About This Analysis Information
Analysis Information Provider:
JPCERT/CC
First Published:
2009-12-14
Source Information Category:
Advisory, Alert
Last Updated:
2009-12-14




Affected Product Tags
lapt:/a:intersystems:cache     (Caché)
lapt:/a:intersystems:ensemble     (Ensemble)
 


Vulnerability Analysis Results
[Information Source Reliability] [?]
Low [?]

Medium [?]
X High [?]

[Impact Level] [?]
Low [?]

Low-Medium [?]
Medium-High [?]
X High [?]

[Access Required] [?]
Physical [?]

Local [?]
X Non-routed [?]
Routed [?]

[Authentication] [?]
Privileged [?]

Standard [?]
Limited [?]
X None or Unnecessary [?]

[User Interaction Required] [?]
Complex [?]

Simple [?]
X None [?]

[Technical Difficulty] [?]
High [?]

Medium-High [?]
Low-Medium [?]
Low [?]

[Availability of Remediation] [?]
X Official Patch [?]

Official Workaround [?]
Unofficial Patch [?]
None [?]

[Incident Activity] [?]
None [?]

X Exploit or PoC [?]
Activity Observed [?]

Alternatives




References

Copyright © 2009 JPCERT/CC All Rights Reserved.