PT-2013-5558 · Ibm · Ibm Db2+2

Danny Tsechansky · Published 2013-12-18 · Updated 2018-09-25 · CVE-2013-5466

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.5 through 10.5 IBM DB2 Connect versions 9.5 through 10.5 IBM DB2 pureScale Feature 9.8 for Enterprise Server Edition

Description The issue allows remote authenticated users to cause a denial of service via unspecified vectors in the XSLT library.

Recommendations For IBM DB2 versions 9.5 through 10.5, consider restricting access to the XSLT library until a fix is available. For IBM DB2 Connect versions 9.5 through 10.5, consider restricting access to the XSLT library until a fix is available. For IBM DB2 pureScale Feature 9.8 for Enterprise Server Edition, consider restricting access to the XSLT library until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2013-5466

Affected Products

Ibm Db2

Ibm Db2 Connect

Ibm Db2 Purescale Feature

References · 9

• http://www-01.ibm.com/support/docview.wss?uid=swg1IC97470 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC97763 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC97402 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC97471 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC97472 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21660046 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-5466 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/88365 · Note
• http://securityfocus.com/bid/64334 · Note