PRIOn knowledge basePRION:CVE-2007-4423Stack overflow
8.2 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.018 Low
EPSS
Percentile
87.9%
Stack-based buffer overflow in the AUTH_LIST_GROUPS_FOR_AUTHID function in IBM DB2 UDB 9.1 before Fixpak 3 allows attackers to cause a denial of service and possibly execute arbitrary code via a long argument.
| CPE | Name | Operator | Version |
|---|---|---|---|
| db2_universal_database | eq | 9.0 | |
| db2_universal_database | eq | 8.0 | |
| db2_universal_database | eq | 9.1 fp2 |
References
secunia.com/advisories/26471
www-1.ibm.com/support/docview.wss?uid=swg1IZ01828
www-1.ibm.com/support/docview.wss?uid=swg21255607
www.appsecinc.com/resources/alerts/db2/2007-01.shtml
www.attrition.org/pipermail/vim/2007-August/001765.html
www.securityfocus.com/archive/1/478313/100/0/threaded
www.securityfocus.com/bid/25339
www.securitytracker.com/id?1018640
www.vupen.com/english/advisories/2007/2912
exchange.xforce.ibmcloud.com/vulnerabilities/36065
exchange.xforce.ibmcloud.com/vulnerabilities/36111
Related
8.2 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.018 Low
EPSS
Percentile
87.9%