8.4
High
CVE-2020-4587 IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow,…
Description
IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper bounds checking. A local attacker could manipulate CD UNIX to obtain root provileges. IBM X-Force ID: 184578.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sterling Connect:Direct for UNIX | 4.3.0 | No fix stated |
| Sterling Connect:Direct for UNIX | 4.2.0 | No fix stated |
| Connect:Direct for UNIX | 6.1.0 | No fix stated |
| Connect:Direct for UNIX | 6.0.0 | No fix stated |
Other CVEs of Sterling Connect:Direct for UNIX
The 4 CVEs of Sterling Connect:Direct for UNIX →
CVE-2025-36137
IBM Sterling Connect Direct for Unix 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2 iFix001, and 6.3.0.2…
7.2
High
CVE-2020-4747
IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtain an authenticated…
7.4
High
CVE-2018-1903
IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, and 6.0.0 could allow a user with restricted sudo access on a…
6.7
Medium