{"api_version":"1","generated_at":"2026-07-23T13:18:39+00:00","cve":"CVE-2010-3731","urls":{"html":"https://cve.report/CVE-2010-3731","api":"https://cve.report/api/cve/CVE-2010-3731.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-3731","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-3731"},"summary":{"title":"CVE-2010-3731","description":"Stack-based buffer overflow in the validateUser implementation in the com.ibm.db2.das.core.DasSysCmd function in db2dasrrm in the DB2 Administration Server (DAS) component in IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP3 allows remote attackers to execute arbitrary code via a long username string.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-10-05 18:00:32","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"10","severity":"","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","name":"ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"404"},{"url":"http://www.vupen.com/english/advisories/2010/2544","name":"http://www.vupen.com/english/advisories/2010/2544","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC70538","name":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC70538","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM IC70538: SECURITY: REMOTE BUFFER OVERFLOW VULNERABILITY IN DB2           ADMINISTRATIVE SERVER - United States","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14687","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14687","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21426108","name":"http://www-01.ibm.com/support/docview.wss?uid=swg21426108","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM - Security Vulnerabilities and HIPER APARs fixed in DB2 for Linux, UNIX, and Windows Version 9.1 Fix Pack 9","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC70539","name":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC70539","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM IC70539: SECURITY: REMOTE BUFFER OVERFLOW VULNERABILITY IN DB2           ADMINISTRATIVE SERVER - United States","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/41686","name":"http://secunia.com/advisories/41686","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"IBM DB2 Administration Server \"validateUser()\" Buffer Overflow Vulnerability - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/46077","name":"http://www.securityfocus.com/bid/46077","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM DB2 Administration Server (DAS) 'validateUser()' Stack Buffer Overflow Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC69986","name":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC69986","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM IC69986: SECURITY: REMOTE BUFFER OVERFLOW VULNERABILITY IN DB2           ADMINISTRATIVE SERVER - United States","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-11-035","name":"http://www.zerodayinitiative.com/advisories/ZDI-11-035","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Zero Day Initiative","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-3731","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3731","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"3731","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"db2","cpe6":"9.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3731","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"db2","cpe6":"9.5","cpe7":"fp1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3731","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"db2","cpe6":"9.5","cpe7":"fp2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3731","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"db2","cpe6":"9.5","cpe7":"fp2a","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3731","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"db2","cpe6":"9.5","cpe7":"fp3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3731","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"db2","cpe6":"9.5","cpe7":"fp3a","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3731","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"db2","cpe6":"9.5","cpe7":"fp3b","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3731","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"db2","cpe6":"9.5","cpe7":"fp4","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3731","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"db2","cpe6":"9.5","cpe7":"fp4a","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3731","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"db2","cpe6":"9.5","cpe7":"fp5","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T03:18:53.034Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"41686","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/41686"},{"name":"46077","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/46077"},{"name":"oval:org.mitre.oval:def:14687","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14687"},{"name":"IC70538","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC70538"},{"name":"IC69986","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC69986"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21426108"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT"},{"name":"ADV-2010-2544","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/2544"},{"name":"IC70539","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC70539"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-11-035"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-09-27T00:00:00.000Z","descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the validateUser implementation in the com.ibm.db2.das.core.DasSysCmd function in db2dasrrm in the DB2 Administration Server (DAS) component in IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP3 allows remote attackers to execute arbitrary code via a long username string."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-09-18T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"41686","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/41686"},{"name":"46077","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/46077"},{"name":"oval:org.mitre.oval:def:14687","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14687"},{"name":"IC70538","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC70538"},{"name":"IC69986","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC69986"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21426108"},{"tags":["x_refsource_CONFIRM"],"url":"ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT"},{"name":"ADV-2010-2544","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/2544"},{"name":"IC70539","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC70539"},{"tags":["x_refsource_MISC"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-11-035"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-3731","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Stack-based buffer overflow in the validateUser implementation in the com.ibm.db2.das.core.DasSysCmd function in db2dasrrm in the DB2 Administration Server (DAS) component in IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP3 allows remote attackers to execute arbitrary code via a long username string."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"41686","refsource":"SECUNIA","url":"http://secunia.com/advisories/41686"},{"name":"46077","refsource":"BID","url":"http://www.securityfocus.com/bid/46077"},{"name":"oval:org.mitre.oval:def:14687","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14687"},{"name":"IC70538","refsource":"AIXAPAR","url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC70538"},{"name":"IC69986","refsource":"AIXAPAR","url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC69986"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21426108","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21426108"},{"name":"ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","refsource":"CONFIRM","url":"ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT"},{"name":"ADV-2010-2544","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/2544"},{"name":"IC70539","refsource":"AIXAPAR","url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC70539"},{"name":"http://www.zerodayinitiative.com/advisories/ZDI-11-035","refsource":"MISC","url":"http://www.zerodayinitiative.com/advisories/ZDI-11-035"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2010-3731","datePublished":"2010-10-05T17:00:00.000Z","dateReserved":"2010-10-05T00:00:00.000Z","dateUpdated":"2024-08-07T03:18:53.034Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-10-05 18:00:32","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*","matchCriteriaId":"11ABF7CC-2FA5-4F2D-901A-2D0EF5B8E717"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*","matchCriteriaId":"58147402-53D5-4F15-862B-EE3DCCD75E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*","matchCriteriaId":"D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*","matchCriteriaId":"CB2EA14A-878A-4D8D-B17A-568712D21C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*","matchCriteriaId":"84C925CD-E753-401F-9EC0-6E3D9861C818"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*","matchCriteriaId":"651D042C-A9F1-42D1-A6DD-95ADBCD08448"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*","matchCriteriaId":"0A589323-B8B8-4CB4-B1A9-B9E771C99123"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp4:*:*:*:*:*:*","matchCriteriaId":"61252AF9-A231-442A-A473-BA0608323BF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp4a:*:*:*:*:*:*","matchCriteriaId":"EB37A1AA-58F0-4A39-8E38-C70692CE67BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp5:*:*:*:*:*:*","matchCriteriaId":"1D9D5B5B-8E23-4987-9BBE-8FE1F27CB1B5"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"3731","Ordinal":"1","Title":"CVE-2010-3731","CVE":"CVE-2010-3731","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"3731","Ordinal":"1","NoteData":"Stack-based buffer overflow in the validateUser implementation in the com.ibm.db2.das.core.DasSysCmd function in db2dasrrm in the DB2 Administration Server (DAS) component in IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP3 allows remote attackers to execute arbitrary code via a long username string.","Type":"Description","Title":"CVE-2010-3731"},{"CveYear":"2010","CveId":"3731","Ordinal":"2","NoteData":"2010-10-05","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"3731","Ordinal":"3","NoteData":"2017-09-18","Type":"Other","Title":"Modified"}]}}}