8.1 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.043 Low
EPSS
Percentile
92.1%
Buffer overflow in the DAS server program in the Core DAS function component in IBM DB2 9.1 before FP4a and 9.5 before FP1 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via unspecified vectors. NOTE: this might be related to CVE-2007-3676.
ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT
secunia.com/advisories/29784
www-01.ibm.com/support/docview.wss?uid=swg1IZ12406
www-1.ibm.com/support/docview.wss?uid=swg1IZ12379
www-1.ibm.com/support/docview.wss?uid=swg21255607
www.securityfocus.com/bid/29601
exchange.xforce.ibmcloud.com/vulnerabilities/45141