Vulnerabilities > IBM > Websphere MQ > 6.0

DATE CVE VULNERABILITY TITLE RISK
2009-09-10 CVE-2009-3160 Multiple vulnerability in IBM WebSphere MQ
IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or asynchronous message consumption is enabled, allows attackers to have an unspecified impact via unknown vectors, related to a "memory overwrite" issue.
network
ibm
8.8
2009-06-03 CVE-2009-0896 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in IBM Websphere MQ
Buffer overflow in the queue manager in IBM WebSphere MQ 6.x before 6.0.2.7 and 7.x before 7.0.1.0 allows remote attackers to execute arbitrary code via a crafted request.
network
low complexity
ibm CWE-119
critical
10.0
2008-03-09 CVE-2007-6705 Permissions, Privileges, and Access Controls vulnerability in IBM Websphere MQ
The WebSphere MQ XA 5.3 before FP13 and 6.0.x before 6.0.2.1 client for Windows, when running in an MTS or a COM+ environment, grants the PROCESS_DUP_HANDLE privilege to the Everyone group upon connection to a queue manager, which allows local users to duplicate an arbitrary handle and possibly hijack an arbitrary process.
local
ibm CWE-264
3.3
2007-11-20 CVE-2007-6044 Resource Management Errors vulnerability in IBM Websphere MQ 6.0
Multiple unspecified vulnerabilities in IBM WebSphere MQ 6.0 have unknown impact and remote attack vectors involving "memory corruption." NOTE: as of 20071116, the only disclosure is a vague pre-advisory with no actionable information.
network
low complexity
ibm CWE-399
critical
10.0