CVE-2009-20005 – InterSystems Caché UtilConfigHome.csp Stack Buffer Overflow

CVE ID : CVE-2009-20005

Published : Sept. 16, 2025, 2:32 p.m. | 24 minutes ago

Description : A stack-based buffer overflow exists in the UtilConfigHome.csp endpoint of InterSystems Caché 2009.1. The vulnerability is triggered by sending a specially crafted HTTP GET request containing an oversized argument to the .csp handler. Due to insufficient bounds checking, the input overflows a stack buffer, allowing an attacker to overwrite control structures and execute arbitrary code. It is unknown if this vulnerability was patched and an affected version range remains undefined.

Severity: 9.3 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…