PT-2012-3872

CVE-2012-2194

·

Publicado

2012-07-25

·

Atualizado

2017-12-22

Descrição por

CVSS 2.0
5.0
Média
MétricasAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.1 before FP12 IBM DB2 versions 9.5 through FP9 IBM DB2 versions 9.7 through FP6 IBM DB2 versions 9.8 through FP5 IBM DB2 versions 10.1
Description A directory traversal issue exists in the SQLJ.DB2 INSTALL JAR stored procedure, allowing remote attackers to replace JAR files.
Recommendations For IBM DB2 version 9.1, apply a fix to address the issue. For IBM DB2 version 9.5, update to at least FP10 to resolve the issue. For IBM DB2 version 9.7, update to at least FP7 to resolve the issue. For IBM DB2 version 9.8, update to at least FP6 to resolve the issue. For IBM DB2 version 10.1, update to a newer version to mitigate the risk.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Identificadores relacionados
CVE-2012-2194
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com