CVEs-PoC/2009/CVE-2009-20005.md

### [CVE-2009-20005](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-20005)
![](https://img.shields.io/static/v1?label=Product&message=InterSystems%20Cach%C3%A9&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=*%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-121%20Stack-based%20Buffer%20Overflow&color=brightgreen)

### Description

A stack-based buffer overflow exists in the UtilConfigHome.csp endpoint of InterSystems Caché 2009.1. The vulnerability is triggered by sending a specially crafted HTTP GET request containing an oversized argument to the .csp handler. Due to insufficient bounds checking, the input overflows a stack buffer, allowing an attacker to overwrite control structures and execute arbitrary code. It is unknown if this vulnerability was patched and an affected version range remains undefined.

### POC

#### Reference
- https://www.exploit-db.com/exploits/16807

#### Github
- https://github.com/ARPSyndicate/cve-scores