PT-2010-5025

CVE-2010-3731

·

Publicado

2010-10-05

·

Atualizado

2017-09-19

Descrição por

CVSS 2.0
10
Alta
MétricasAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.1 before FP10 IBM DB2 versions 9.5 before FP6a IBM DB2 versions 9.7 before FP3
Description The issue is related to a stack-based buffer overflow in the validateUser implementation in the com.ibm.db2.das.core.DasSysCmd function in db2dasrrm in the DB2 Administration Server (DAS) component. This allows remote attackers to execute arbitrary code via a long username string.
Recommendations For IBM DB2 version 9.1, update to FP10 or later. For IBM DB2 version 9.5, update to FP6a or later. For IBM DB2 version 9.7, update to FP3 or later.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Identificadores relacionados
CVE-2010-3731
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com