PT-2010-5025
CVE-2010-3731
·
تاريخ النشر
2010-10-05
·
تاريخ التحديث
2017-09-19
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
IBM DB2 versions 9.1 before FP10
IBM DB2 versions 9.5 before FP6a
IBM DB2 versions 9.7 before FP3
Description
The issue is related to a stack-based buffer overflow in the validateUser implementation in the com.ibm.db2.das.core.DasSysCmd function in db2dasrrm in the DB2 Administration Server (DAS) component. This allows remote attackers to execute arbitrary code via a long
username string.Recommendations
For IBM DB2 version 9.1, update to FP10 or later.
For IBM DB2 version 9.5, update to FP6a or later.
For IBM DB2 version 9.7, update to FP3 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾