PT-2012-2805 · Ibm · Ibm Db2

Publicado 2012-03-20 · Atualizado 2018-10-10 · CVE-2012-0710

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.1 before FP11 IBM DB2 versions 9.5 before FP9 IBM DB2 versions 9.7 before FP5 IBM DB2 versions 9.8 before FP4

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending a crafted Distributed Relational Database Architecture (DRDA) request.

Recommendations For IBM DB2 version 9.1, update to FP11 or later to resolve the issue. For IBM DB2 version 9.5, update to FP9 or later to resolve the issue. For IBM DB2 version 9.7, update to FP5 or later to resolve the issue. For IBM DB2 version 9.8, update to FP4 or later to resolve the issue.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2012-0710

Produtos afetados

Ibm Db2

Referências · 9

• http://www-01.ibm.com/support/docview.wss?uid=swg21588090 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC76899 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15078 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73494 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC76902 · Aviso do Fabricante
• http://securityfocus.com/bid/78282 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC76901 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-0710 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC76781 · Aviso do Fabricante