CVE-2009-0879: IBM Director

Medium severity, CVSS 5.0. EPSS: 8.2% chance of exploitation in the next 30 days.

The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of service (daemon crash) via a long consumer name, as demonstrated by an M-POST request to a long /CIMListener/ URI.

Affected products

• IBM Director: up to and including 5.20.3; version 3.1.1 only; version 4.10 only; version 4.11 only; version 4.12 only; version 4.20 only; …

Published 2009-03-12. Last modified 2026-06-16.