PT-2012-2805 · Ibm · Ibm Db2

Published 2012-03-20 · Updated 2018-10-10 · CVE-2012-0710

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.1 before FP11 IBM DB2 versions 9.5 before FP9 IBM DB2 versions 9.7 before FP5 IBM DB2 versions 9.8 before FP4

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending a crafted Distributed Relational Database Architecture (DRDA) request.

Recommendations For IBM DB2 version 9.1, update to FP11 or later to resolve the issue. For IBM DB2 version 9.5, update to FP9 or later to resolve the issue. For IBM DB2 version 9.7, update to FP5 or later to resolve the issue. For IBM DB2 version 9.8, update to FP4 or later to resolve the issue.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2012-0710

Affected Products

Ibm Db2

References · 9

• http://www-01.ibm.com/support/docview.wss?uid=swg21588090 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC76899 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC76902 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC76901 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0710 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC76781 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15078 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73494 · Note
• http://securityfocus.com/bid/78282 · Note