CVE-2009-3900

HIGH 7.8CVE-2009-3900 · Published 06/11/2009 · updated 16/06/2026

In short

CVE-2009-3900 is a HIGH (CVSS 7.8) vulnerability affecting powerha (ibm).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
powerha ibm	`= 5.4= 5.4.1= 5.5= 6.1`	No fix yet

Description

Unspecified vulnerability in the Cluster Management component in IBM PowerHA 5.4, 5.4.1, 5.5, and 6.1 on AIX allows remote attackers to modify the operating-system configuration via packets to the godm port (6177/tcp).

References

aix.software.ibm.com/aix/efixes/security/haport_advisory.asc · Exploit
secunia.com/advisories/37267 · Vendor Advisory
www-01.ibm.com/support/docview.wss
www-01.ibm.com/support/docview.wss · Vendor Advisory
www-01.ibm.com/support/docview.wss
securityfocus.com/bid/36931 · Patch
vupen.com/english/advisories/2009/3153 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/54154

More vulnerabilities in powerha

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free