IBM DB2 Buffer Overflow (7010565) (Windows)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(179337);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2023/08/07");

  script_cve_id("CVE-2023-30431");
  script_xref(name:"IAVB", value:"2023-B-0057");

  script_name(english:"IBM DB2 Buffer Overflow (7010565) (Windows)");

  script_set_attribute(attribute:"synopsis", value:
"The remote database server is affected by a buffer overflow condition");
  script_set_attribute(attribute:"description", value:
"According to it self-reported version number, IBM Db2 is is vulnerable to a is vulnerable to a buffer overflow, 
caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://www.ibm.com/support/pages/node/7010565");
  script_set_attribute(attribute:"solution", value:
"Apply the appropriate IBM DB2 Fix Pack or Special Build based on the most recent fix pack level for your branch.");
  script_set_attribute(attribute:"agent", value:"windows");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2023-30431");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2023/07/07");
  script_set_attribute(attribute:"patch_publication_date", value:"2023/07/12");
  script_set_attribute(attribute:"plugin_publication_date", value:"2023/08/03");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:ibm:db2");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Databases");

  script_copyright(english:"This script is Copyright (C) 2023 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("db2_and_db2_connect_installed.nbin");
  script_require_keys("SMB/db2/Installed");

  exit(0);
}

include('vcf_extras_db2.inc');

get_kb_item_or_exit('SMB/db2/Installed');
var app_info = vcf::ibm_db2::get_app_info();

var constraints = [
  {'equal':'10.5.1100.2866', 'fixed_build':'41328', 'fixed_display':'Special Build 41328 for DB2 10.5 Fix Pack 11'},
  {'equal':'11.1.4070.1733', 'fixed_build':'41327', 'fixed_display':'Special Build 41327 for DB2 11.1.4 Fix Pack 7'},
  {'equal':'11.5.7000.1973', 'fixed_build':'31201', 'fixed_display':'Special Build 31201 for DB2 11.5.7 Fix Pack 0'},
  {'equal':'11.5.8000.317',  'fixed_build':'31203', 'fixed_display':'Special Build 31203 for DB2 11.5.8 Fix Pack 0'},
  {'min_version':'10.5', 'fixed_version':'10.5.1100.2866', 'fixed_display':'Special Build 41328 for DB2 10.5 Fix Pack 11'},
  {'min_version':'11.1', 'fixed_version':'11.1.4070.1733', 'fixed_display':'Special Build 41327 for DB2 11.1.4 Fix Pack 7'},
  {'min_version':'11.5', 'fixed_version':'11.5.7000.1973', 'fixed_display':'Special Build 31201 for DB2 11.5.7 Fix Pack 0'},
  {'min_version':'11.5', 'fixed_version':'11.5.8000.317',  'fixed_display':'Special Build 31203 for DB2 11.5.8 Fix Pack 0'}
];

vcf::ibm_db2::check_version_and_report(app_info:app_info, constraints:constraints, severity:SECURITY_WARNING);