CVE-2009-0436: The (1) mod_ibm_ssl and (2) mod_cgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1....

Security readout for executives and security teams

CVE-2009-0436 is a legacy IBM HTTP Server issue affecting deployments used with WebSphere Application Server. Two modules could create local UNIX sockets with overly permissive permissions. The public record does not define the business impact, so urgency depends on whether these older versions still exist in the environment. Exposure is limited to systems running the affected IBM HTTP Server versions, especially where bundled or used with WebSphere Application Server. The source record indicates local attack vectors, so remote-only exposure is not established. Medium operational priority if legacy IBM WebSphere or IBM HTTP Server remains in production; otherwise low. The main task is confirming whether affected versions exist, because the public record does not establish remote exploitation or business impact. Mitigation focus: Inventory IBM HTTP Server and WebSphere Application Server versions.; Upgrade IBM HTTP Server 6.0.x to 6.0.2.31 or later where applicable.; Upgrade IBM HTTP Server 6.1.x to 6.1.0.19 or later where applicable..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.