CVE-2009-3160

IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or asynchronous message consumption is enabled, allows attackers to have an unspecified impact via unknown vectors, related to a "memory overwrite" issue.

• http://secunia.com/advisories/36647Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg24024153Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ56259
• http://www.securityfocus.com/bid/36310
• http://www.vupen.com/english/advisories/2009/2578Patch, Vendor Advisory
• http://secunia.com/advisories/36647Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg24024153Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ56259
• http://www.securityfocus.com/bid/36310
• http://www.vupen.com/english/advisories/2009/2578Patch, Vendor Advisory

Published

Sep 10, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-3154SQL injection vulnerability in the Almond Classifieds (com_a…
• CVE-2009-3155Cross-site scripting (XSS) vulnerability in gmap.php in the …
• CVE-2009-3156Cross-site scripting (XSS) vulnerability in the Date Tools s…
• CVE-2009-3157Cross-site scripting (XSS) vulnerability in the Calendar mod…
• CVE-2009-3158admin/files.php in simplePHPWeb 0.2 does not require authent…
• CVE-2009-3159Unspecified vulnerability in the rriDecompress function in I…
• CVE-2009-3161The server in IBM WebSphere MQ 7.0.0.1, 7.0.0.2, and 7.0.1.0…
• CVE-2009-3162Cross-site scripting (XSS) vulnerability in Multi Website 1.…
• CVE-2009-3163Multiple format string vulnerabilities in lib/silcclient/com…
• CVE-2009-3164Unspecified vulnerability in the IPv6 networking stack in Su…
• CVE-2009-3165SQL injection vulnerability in the Bug.create WebService fun…
• CVE-2009-3166token.cgi in Bugzilla 3.4rc1 through 3.4.1 places a password…