CVE-2009-3518

IBM Installation Manager 1.3.0 - 'iim://' URI handler

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2009-3518 has a selected CVSS score of 9.3; EIP currently links 1 catalogued exploit.

Description

Argument injection vulnerability in the iim: URI handler in IBMIM.exe in IBM Installation Manager 1.3.2 and earlier, as used in IBM Rational Robot and Rational Team Concert, allows remote attackers to load arbitrary DLL files via the -vm option, as demonstrated by a reference to a UNC share pathname.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBIBM Installation Manager 1.3.0 - 'iim://' URI handlerExploitDB exploitby bruiserNot analyzed1 file
ExploitDB
PoC details

References

4