Stack overflow

2008-04-1618:05:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Stack-based buffer overflow in db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to execute arbitrary code via a long DASPROF environment variable.

CPENameOperatorVersion
db2_universal_databaseeq9.5
db2_universal_databaseeq8
db2_universal_databaseeq9.1

Name	Operator	Version
db2_universal_database	eq	9.5
db2_universal_database	eq	8
db2_universal_database	eq	9.1

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=689

secunia.com/advisories/29784

www.securityfocus.com/bid/27870

www.securitytracker.com/id?1019853

www.vupen.com/english/advisories/2008/1237/references

exchange.xforce.ibmcloud.com/vulnerabilities/41847