CVE-2012-2197
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:S/C:C/I:C/A:C
7.3 High
AI Score
Confidence
Low
0.087 Low
EPSS
Percentile
94.6%
Stack-based buffer overflow in the Java Stored Procedure infrastructure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote authenticated users to execute arbitrary code by leveraging certain CONNECT and EXECUTE privileges.
Affected configurations
References
secunia.com/advisories/49919
www-01.ibm.com/support/docview.wss?uid=swg1IC84555
www-01.ibm.com/support/docview.wss?uid=swg1IC84752
www-01.ibm.com/support/docview.wss?uid=swg1IC84753
www-01.ibm.com/support/docview.wss?uid=swg1IC84754
www-01.ibm.com/support/docview.wss?uid=swg1IC84755
www-01.ibm.com/support/docview.wss?uid=swg21600837
www.securityfocus.com/bid/54487
Related
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:S/C:C/I:C/A:C
7.3 High
AI Score
Confidence
Low
0.087 Low
EPSS
Percentile
94.6%