Lucene search

K
nvd[email protected]NVD:CVE-2012-4826
HistoryOct 20, 2012 - 10:41 a.m.

CVE-2012-4826

2012-10-2010:41:27
CWE-119
web.nvd.nist.gov

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.121 Low

EPSS

Percentile

95.4%

Stack-based buffer overflow in the SQL/PSM (aka SQL Persistent Stored Module) Stored Procedure (SP) infrastructure in IBM DB2 9.1, 9.5, 9.7 before FP7, 9.8, and 10.1 might allow remote authenticated users to execute arbitrary code by debugging a stored procedure.

Affected configurations

NVD
Node
ibmdb2Match9.1
OR
ibmdb2Match9.5
OR
ibmdb2Match9.7
OR
ibmdb2Match9.7.0.1
OR
ibmdb2Match9.7.0.2
OR
ibmdb2Match9.7.0.3
OR
ibmdb2Match9.7.0.4
OR
ibmdb2Match9.7.0.5
OR
ibmdb2Match9.7.0.6
OR
ibmdb2Match9.8
OR
ibmdb2Match10.1

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.121 Low

EPSS

Percentile

95.4%