Multiple IBM DB2 Products CVE-2012-4826 Remote Stack Buffer Overflow Vulnerability

Bugtraq ID:	56133
Class:	Boundary Condition Error
CVE:	CVE-2012-4826
Remote:	Yes
Local:	No
Published:	Oct 19 2012 12:00AM
Updated:	Oct 08 2014 03:01PM
Credit:	Martin Rakhmanov from Application Security
Vulnerable:	IBM DB2 Workgroup Server Edition 9.7 IBM DB2 Workgroup Server Edition 9.5 IBM DB2 Express Edition 9.7 IBM DB2 Express Edition 9.5 IBM DB2 Enterprise Server Edition 9.7 IBM DB2 Enterprise Server Edition 9.5 IBM DB2 Connect Unlimited Edition for System z 9.7 IBM DB2 Connect Unlimited Edition for System z 9.5 IBM DB2 Connect Unlimited Edition for System i 9.7 IBM DB2 Connect Unlimited Edition for System i 9.5 IBM DB2 Connect Enterprise Edition 9.7 IBM DB2 Connect Enterprise Edition 9.5 IBM DB2 Advanced Enterprise Server Edition 9.7 IBM DB2 Advanced Enterprise Server Edition 9.5
Not Vulnerable:

Multiple IBM DB2 Products CVE-2012-4826 Remote Stack Buffer Overflow Vulnerability

Multiple IBM DB2 products are prone to a remote stack-based buffer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of the affected applications. Failed exploit attempts will result in a denial-of-service condition.

Multiple IBM DB2 Products CVE-2012-4826 Remote Stack Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple IBM DB2 Products CVE-2012-4826 Remote Stack Buffer Overflow Vulnerability

Solution:
Vendor updates are available. Please see the references for details.

Multiple IBM DB2 Products CVE-2012-4826 Remote Stack Buffer Overflow Vulnerability

References:

• IBM Homepage (IBM)