PT-2007-5467 · Ibm · Ibm Db2 Udb

Publicado 2007-08-18 · Atualizado 2017-07-29 · CVE-2007-4276

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM DB2 UDB versions 8.0 through 8.0 before Fixpak 15 IBM DB2 UDB versions 9.1 through 9.1 before Fixpak 3

Description A stack-based buffer overflow issue allows attackers to execute arbitrary code via a long DASPROF and possibly other environment variables, which are copied into the buildDasPaths buffer.

Recommendations For IBM DB2 UDB version 8, apply Fixpak 15 to resolve the issue. For IBM DB2 UDB version 9.1, apply Fixpak 3 to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-4276

Produtos afetados

Ibm Db2 Udb

Referências · 12

• http://secunia.com/advisories/26471 · Aviso do Fabricante
• http://www-1.ibm.com/support/docview.wss?uid=swg21255607 · Correção
• http://attrition.org/pipermail/vim/2007-August/001765.html · Nota
• http://securityfocus.com/bid/25339 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=swg21255352 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36067 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=swg1IY99311 · Aviso do Fabricante
• http://securitytracker.com/id?1018581 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4276 · Nota de Segurança
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=583 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=swg1IY97346 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/2912 · Nota