PT-2012-5598 · Ibm · Ibm Db2

Martin Rakhmanov · Publicado 2012-10-20 · Atualizado 2013-03-02 · CVE-2012-4826

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.1, 9.5, 9.7 before FP7, 9.8, and 10.1

Description A stack-based buffer overflow issue exists in the SQL/PSM Stored Procedure infrastructure, potentially allowing remote authenticated users to execute arbitrary code by debugging a stored procedure.

Recommendations For IBM DB2 version 9.1, update to a version that includes the fix for this issue. For IBM DB2 version 9.5, update to a version that includes the fix for this issue. For IBM DB2 version 9.7, apply FP7 or a later fix pack to resolve the issue. For IBM DB2 version 9.8, update to a version that includes the fix for this issue. For IBM DB2 version 10.1, update to a version that includes the fix for this issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-4826

Produtos afetados

Ibm Db2

Referências · 10

• http://www-01.ibm.com/support/docview.wss?uid=swg1IC86783 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg21614536 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC86781 · Aviso do Fabricante
• http://osvdb.org/86414 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-4826 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21450666 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC87192 · Aviso do Fabricante
• http://securityfocus.com/bid/56133 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC86782 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC86765 · Aviso do Fabricante