Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2009-20005— InterSystems Caché UtilConfigHome.csp Stack Buffer Overflow

Quick assessment

Affected
InterSystems Corporation InterSystems Caché
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

InterSystems Caché是美国InterSystems公司的一套数据库管理系统。该系统主要用于开发医疗保健管理、银行和金融服务、政府和其他行业的软件应用程序。 InterSystems Caché2009.1版本存在安全漏洞，该漏洞源于UtilConfigHome.csp端点未充分检查边界，可能导致栈缓冲区溢出和执行任意代码。

AI Predicted 9.8 Difficulty: Easy EPSS 1.69% · P77

Public Exploits 1

Metasploit · 1 intersystems_cache.rb [exploit]

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
InterSystems Corporation InterSystems Caché ≤ 2009.1 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2009-20005

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
InterSystems Caché UtilConfigHome.csp Stack Buffer Overflow
Source: CVE Program / CVE List V5
Vulnerability Description
A stack-based buffer overflow exists in the UtilConfigHome.csp endpoint of InterSystems Caché 2009.1. The vulnerability is triggered by sending a specially crafted HTTP GET request containing an oversized argument to the .csp handler. Due to insufficient bounds checking, the input overflows a stack buffer, allowing an attacker to overwrite control structures and execute arbitrary code. It is unknown if this vulnerability was patched and an affected version range remains undefined.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
栈缓冲区溢出
Source: CVE Program / CVE List V5
Vulnerability Title
InterSystems Caché 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
InterSystems Caché是美国InterSystems公司的一套数据库管理系统。该系统主要用于开发医疗保健管理、银行和金融服务、政府和其他行业的软件应用程序。 InterSystems Caché2009.1版本存在安全漏洞，该漏洞源于UtilConfigHome.csp端点未充分检查边界，可能导致栈缓冲区溢出和执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
InterSystems Corporation InterSystems Caché 0 ~ 2009.1 -

II. Public POCs for CVE-2009-20005

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-20005

请登录查看更多情报信息。

IV. Related Vulnerabilities

Same weakness: CWE-121

V. Comments for CVE-2009-20005

No comments yet

Leave a comment