PT-2013-5558 · Ibm · Ibm Db2+2

Danny Tsechansky · Publicado 2013-12-18 · Atualizado 2018-09-25 · CVE-2013-5466

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.5 through 10.5 IBM DB2 Connect versions 9.5 through 10.5 IBM DB2 pureScale Feature 9.8 for Enterprise Server Edition

Description The issue allows remote authenticated users to cause a denial of service via unspecified vectors in the XSLT library.

Recommendations For IBM DB2 versions 9.5 through 10.5, consider restricting access to the XSLT library until a fix is available. For IBM DB2 Connect versions 9.5 through 10.5, consider restricting access to the XSLT library until a fix is available. For IBM DB2 pureScale Feature 9.8 for Enterprise Server Edition, consider restricting access to the XSLT library until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2013-5466

Produtos afetados

Ibm Db2

Ibm Db2 Connect

Ibm Db2 Purescale Feature

Referências · 9

• http://www-01.ibm.com/support/docview.wss?uid=swg1IC97470 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/88365 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC97763 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC97402 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC97471 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC97472 · Aviso do Fabricante
• http://securityfocus.com/bid/64334 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21660046 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-5466 · Nota de Segurança