DB2 - Problembeschreibung
Problem IC92495 | Status: Geschlossen |
SECURITY: STACK BUFFER OVERFLOW VULNERABILITY IN DB2AUD AND DB2FLACC (CVE-2013-3475). | |
Produkt: | |
DB2 FOR LUW / DB2FORLUW / 970 - DB2 | |
Problembeschreibung: | |
The programs db2aud and db2flacc contain a stack buffer overflow vulnerability which an attacker could exploit to gain DB2 instance owner privilege. | |
Problem-Zusammenfassung: | |
**************************************************************** * USERS AFFECTED: * * All DB2 systems on all Linux and Unix platforms at service * * levels Version 9.7 GA through to Version 9.7 Fix Pack 8. * **************************************************************** * PROBLEM DESCRIPTION: * * See Error Description * **************************************************************** * RECOMMENDATION: * * Upgrade to DB2 Version 9.7 Fix Pack 9. * **************************************************************** | |
Local-Fix: | |
verfügbare FixPacks: | |
DB2 Version 9.7 Fix Pack 9 for Linux, UNIX, and Windows | |
Lösung | |
The complete fix for this problem first appears in DB2 Version 9.7 Fix Pack 9 and all the subsequent Fix Packs. See Security Bulletin: Privilege escalation vulnerability in IBM DB2's Audit Facility (CVE-2013-3475). http://www-01.ibm.com/support/docview.wss?uid=swg21639355 | |
Workaround | |
keiner bekannt / siehe Local-Fix | |
Weitere Daten | |
Datum - Problem gemeldet : Datum - Problem geschlossen : Datum - der letzten Änderung: | 22.05.2013 16.12.2013 17.02.2014 |
Problem behoben ab folgender Versionen (IBM BugInfos) | |
9.7.FP9 | |
Problem behoben lt. FixList in der Version | |
9.7.0.9 | |
9.7.0.9 |