PT-2013-4802 · Ibm · Ibm Db2 Advanced Enterprise Server Edition+1

Publicado 2013-10-02 · Atualizado 2017-08-29 · CVE-2013-4032

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM DB2 Enterprise Server Edition versions 10.1 before FP3 and 10.5 IBM DB2 Advanced Enterprise Server Edition versions 10.1 before FP3 and 10.5

Description The issue allows remote attackers to cause a denial of service via vectors involving arbitrary data when a multi-node configuration is used in the Fast Communications Manager (FCM) component.

Recommendations For IBM DB2 Enterprise Server Edition versions 10.1 before FP3, update to FP3 or a later version. For IBM DB2 Enterprise Server Edition version 10.5, apply the fix provided by IBM. For IBM DB2 Advanced Enterprise Server Edition versions 10.1 before FP3, update to FP3 or a later version. For IBM DB2 Advanced Enterprise Server Edition version 10.5, apply the fix provided by IBM.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2013-4032

Produtos afetados

Ibm Db2 Advanced Enterprise Server Edition

Ibm Db2 Enterprise Server Edition

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/86092 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC94939 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC94434 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg21650231 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-4032 · Nota de Segurança