VendorsIBMwebsphere_mq6.0.2.10
Vulnerabilities

IBM WebSphere MQ 6.0.2.10

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2011-0314
Heap-based buffer overflow in IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 allows remote authenticated users to execute arbitrary code or cause a denial of service (queue manager crash) by inserting an invalid message into the queue.
Published 2011-01-12 · Modified
6.5EPSS 0.030
CVE-2010-2637
IBM WebSphere MQ 6.0 before 6.0.2.9 and 7.0 before 7.0.1.1 does not encrypt the username and password in the security parameters field, which allows remote attackers to obtain sensitive information by sniffing the network traffic from a .NET client application.
Published 2010-11-12 · Modified
4.3EPSS 0.017
CVE-2011-1224
IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 does not use the CRL Distribution Points (CDP) certificate extension, which might allow man-in-the-middle attackers to spoof an SSL partner via a revoked certificate for a (1) client, (2) queue manager, or (3) application.
Published 2011-07-07 · Modified
4.3EPSS 0.008
CVE-2009-0900
Heap-based buffer overflow in the client in IBM WebSphere MQ 6.0 before 6.0.2.7 and 7.0 before 7.0.1.0 allows local users to gain privileges via crafted SSL information in a Client Channel Definition Table (CCDT) file.
Published 2011-10-30 · Modified
4.1EPSS 0.003