[Forgot Password]
Login  Register Subscribe

23631

 
 

119105

 
 

98250

 
 

909

 
 

79281

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2007-4276

Date: (C)2007-08-18   (M)2017-07-31 


Stack-based buffer overflow in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows attackers to execute arbitrary code via a long DASPROF and possibly other environment variables, which are copied into the buildDasPaths buffer.

CVSS Score: 6.9Access Vector: LOCAL
Exploit Score: 3.4Access Complexity: MEDIUM
Impact Score: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE





Reference:
SECTRACK-1018581
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=583
http://www.attrition.org/pipermail/vim/2007-August/001765.html
BID-25339
SECUNIA-26471
ADV-2007-2912
IY97346
IY99311
http://www.attrition.org/pipermail/vim/2007-August/001765.html
db2-environment-variables-bo(36067)
http://www-1.ibm.com/support/docview.wss?uid=swg21255352
http://www-1.ibm.com/support/docview.wss?uid=swg21255607

CWE    1
CWE-119

© 2013 SecPod Technologies