| Vulnerability Name: | CVE-2012-4826 (CCN-78817) | ||||||||
| Assigned: | 2012-10-18 | ||||||||
| Published: | 2012-10-18 | ||||||||
| Updated: | 2013-03-02 | ||||||||
| Summary: | Stack-based buffer overflow in the SQL/PSM (aka SQL Persistent Stored Module) Stored Procedure (SP) infrastructure in IBM DB2 9.1, 9.5, 9.7 before FP7, 9.8, and 10.1 might allow remote authenticated users to execute arbitrary code by debugging a stored procedure. | ||||||||
| CVSS v3 Severity: | 8.0 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 8.5 High (CVSS v2 Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C) 6.3 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C/E:U/RL:OF/RC:C)
6.3 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-119 | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2012-4826 Source: OSVDB Type: UNKNOWN 86414 Source: CCN Type: SA50921 IBM DB2 SQL/PSM Stored Procedure Debugging Buffer Overflow Vulnerability Source: AIXAPAR Type: UNKNOWN IC86765 Source: AIXAPAR Type: Vendor Advisory IC86781 Source: AIXAPAR Type: UNKNOWN IC86782 Source: AIXAPAR Type: UNKNOWN IC86783 Source: AIXAPAR Type: UNKNOWN IC87192 Source: CONFIRM Type: Vendor Advisory http://www-01.ibm.com/support/docview.wss?uid=swg21450666 Source: CCN Type: IBM Security Bulletin 1614536 Buffer Overflow Vulnerability in IBM DB2 SQL/PSM Stored Procedure Infrastructure (CVE-2012-4826). Source: CONFIRM Type: Vendor Advisory http://www-01.ibm.com/support/docview.wss?uid=swg21614536 Source: CCN Type: OSVDB ID: 86414 IBM DB2 SQL/Persistent Stored Module (PSM) Stored Procedure (SP) Infrastructure Remote Overflow Source: BID Type: UNKNOWN 56133 Source: CCN Type: BID-56133 Multiple IBM DB2 Products CVE-2012-4826 Remote Stack Buffer Overflow Vulnerability Source: XF Type: UNKNOWN db2-javasp-incomplete-bo(78817) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| Oval Definitions | |||||||||
| |||||||||
| BACK | |||||||||