CVE-2010-2639
published 2010-12-06CVE-2010-2639: IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipients via vectors involving access by the…
PriorityP423medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.24%
65.7th percentile
IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipients via vectors involving access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, related to the caching of mutable objects and "concurrency issues."
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | websphere_commerce | — | — |
| ibm | websphere_commerce | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
ET SCADA CitectSCADA ODBC Overflow Attempt
suricata·2010-07-30
CVE-2008-2639 ET SCADA CitectSCADA ODBC Overflow Attempt
ET SCADA CitectSCADA ODBC Overflow Attempt
Rule: alert tcp $EXTERNAL_NET any -> $HOME_NET 20222 (msg:"ET SCADA CitectSCADA ODBC Overflow Attempt"; flow:established,to_server; dsize:4; byte_test:4,>,399,0; reference:cve,2008-2639; reference:url,www.digitalbond.com/index.php/2008/09/08/ids-signature-for-citect-vuln/; reference:url,digitalbond.com/tools/quickdraw/vulnerability-rules; classtype:attempted-user; sid:2008542; rev:8; metadata:created_at 2010_07_30, cve CVE_2008_2639, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2019_07_26;)
No writeups or analysis indexed.
http://www-01.ibm.com/support/docview.wss?uid=swg24028397http://www-1.ibm.com/support/docview.wss?uid=swg1JR38114http://www.securitytracker.com/id?1024845https://exchange.xforce.ibmcloud.com/vulnerabilities/63406http://www-01.ibm.com/support/docview.wss?uid=swg24028397http://www-1.ibm.com/support/docview.wss?uid=swg1JR38114http://www.securitytracker.com/id?1024845https://exchange.xforce.ibmcloud.com/vulnerabilities/63406
2010-12-06
Published