Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow.

According to its version, the installation of IBM DB2 9.1 running on the remote host is affected by one or more of the following issues :

  - An integer signedness error exists in the 'db2asrrm'     process that can lead to a heap-based buffer overflow.
    Note that this issue does not affect Windows hosts.
    (#IC80561 / CVE-2012-0711)

  - An error exists related to the stored procedure     'SQLJ.DB2_INSTALL_JAR' that can allow 'JAR' files to be     overwritten. Note that this issue only affects Windows     hosts. (#IC84019 / CVE-2012-2194)

  - An error exists related to the stored procedures     'GET_WRAP_CFG_C' and 'GET_WRAP_CFG_C2' that can allow     unauthorized access to XML files. (#IC84614 /     CVE-2012-2196)

  - An error exists related to the Java stored procedure     infrastructure that can allow stack-based buffer     overflows. (#IC84555 / CVE-2012-2197)

According to its version, the installation of DB2 9.7 running on the remote host is prior to Fix Pack 6. It is, therefore, affected by multiple vulnerabilities :

  - A local user can exploit a vulnerability in the bundled     IBM Tivoli Monitoring Agent (ITMA) to escalate their     privileges. (CVE-2011-4061)

  - An authorized user with 'CONNECT' and 'CREATEIN'     privileges on a database can perform unauthorized     reads on tables. (CVE-2012-0709)

  - An unspecified error in the DB2 Administration Server     (DAS) can allow remote privilege escalation or denial     of service via unspecified vectors. Note that this     issue does not affect Windows hosts. (CVE-2012-0711)

  - An authorized user with 'CONNECT' privileges from     'PUBLIC' can cause a denial of service via unspecified     methods related to DB2's XML feature. (CVE-2012-0712)

  - An unspecified information disclosure error exists     related to the XML feature that can allow improper     access to arbitrary XML files. (CVE-2012-0713)

  - An error exists related to the Distributed Relational     Database Architecture (DRDA) that can allow denial of     service conditions when processing certain request.
    (CVE-2012-2180)

Versions of IBM DB2 9.5 earlier than Fix Pack 9 are potentially affected by multiple issues :

 - Incorrect, world-writable file permissions are in place for the file 'NODES.REG'. (IC79518)
 - An unspecified error can allow attacks to cause a denial of service via unspecified vectors. (IC76899)
 - A local user can exploit a vulnerability in the bundled IBM Tivoli Monitoring Agent (ITMA) to escalate their privileges. (IC79970)
 - An unspecified error in the DB2 Administration Server (DAS) can allow remote privilege escalation or denial of service via unspecified vectors. Note that this issue does not affect Windows hosts. (IC80728)
 - An authorized user with 'CONNECT' privileges from 'PUBLIC' can cause a denial of service via unspecified methods related to DB2's XML feature. (IC81379)
 - An authorized user with 'CONNECT' and 'CREATEIN' privileges on a database can perform unauthorized reads on tables. (IC81387)

According to its version, the installation of IBM DB2 9.5 running on the remote host is prior to Fix Pack 9. It is, therefore, affected by the following vulnerabilities :

  - Incorrect, world-writable file permissions are in place     for the file 'NODES.REG'. (IC79518)

  - An unspecified error can allow attacks to cause a     denial of service via unspecified vectors. (IC76899)

  - A local user can exploit a vulnerability in the bundled     IBM Tivoli Monitoring Agent (ITMA) to escalate their     privileges. (IC79970)

  - An unspecified error in the DB2 Administration Server     (DAS) can allow remote privilege escalation or denial     of service via unspecified vectors. Note that this     issue does not affect Windows hosts. (IC80728)

  - An authorized user with 'CONNECT' privileges from     'PUBLIC' can cause a denial of service via unspecified     methods related to DB2's XML feature. (IC81379)

  - An authorized user with 'CONNECT' and 'CREATEIN'     privileges on a database can perform unauthorized     reads on tables. (IC81387)

ID	Name	Product	Family	Severity
60098	IBM DB2 9.1 < Fix Pack 12 Multiple Vulnerabilities	Nessus	Databases	high
59904	IBM DB2 9.7 < Fix Pack 6 Multiple Vulnerabilities	Nessus	Databases	high
6347	IBM DB2 9.5 < 9.5 Fix Pack 9 Multiple Vulnerabilities	Nessus Network Monitor	Database	medium
58293	DB2 9.5 < Fix Pack 9 Multiple Vulnerabilities	Nessus	Databases	medium

Detections

Analytics

CVE-2012-0711

critical

Tenable Plugins

high

high

medium

medium