CVE-2020-4587

IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper bounds checking

High · published August 24, 2020

CVSS v3.0
8.4
EPSS
0%
Percentile
26.3
In the wild
Unconfirmed
What it is

IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper bounds checking. A local attacker could manipulate CD UNIX to obtain root provileges. IBM X-Force ID: 184578.

The record
Technical detail
CVSS v3.0
8.4 · HIGH
Vector
CVSS:3.0/A:H/PR:N/C:H/AV:L/S:U/I:H/UI:N/AC:L/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.00340 · 26.3th percentile
Published
2020-08-24T15:30Z
EPSS history
Timeline
  • 24 AUG 15:30Z
    IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper bounds checking
    cvelistv5