PT-2013-1485 · Ibm · Ibm Infosphere Information Server+1

Published 2013-01-31 · Updated 2017-08-29 · CVE-2012-0204

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions InfoSphere Information Server versions 8.1 through 9.1 InfoSphere Import Export Manager versions 8.1 through 9.1 InfoSphere Information Server version 8.5 before FP3 InfoSphere Information Server version 8.7

Description The issue allows local users to gain privileges via a Trojan horse DLL in the current working directory due to an untrusted search path vulnerability in InfoSphere Import Export Manager in IBM InfoSphere Information Server.

Recommendations For InfoSphere Information Server versions 8.1 through 9.1, update to a version that includes the fix for this issue. For InfoSphere Import Export Manager versions 8.1 through 9.1, update to a version that includes the fix for this issue. For InfoSphere Information Server version 8.5 before FP3, apply FP3 or a later fix pack to resolve the issue. For InfoSphere Information Server version 8.7, update to a version that includes the fix for this issue.

Fix

Related Identifiers

CVE-2012-0204

Affected Products

Infosphere Import Export Manager

Ibm Infosphere Information Server

References · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21623501 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0204 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73255 · Note