Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 05/10/2010 Updated: 19/09/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in the validateUser implementation in the com.ibm.db2.das.core.DasSysCmd function in db2dasrrm in the DB2 Administration Server (DAS) component in IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP3 allows remote malicious users to execute arbitrary code via a long username string.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ibm db2 9.5

CWE-119 http://www-01.ibm.com/support/docview.wss?uid=swg1IC70538 http://secunia.com/advisories/41686 http://www.vupen.com/english/advisories/2010/2544 ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT http://www.zerodayinitiative.com/advisories/ZDI-11-035 http://www.securityfocus.com/bid/46077 http://www-01.ibm.com/support/docview.wss?uid=swg21426108 http://www-01.ibm.com/support/docview.wss?uid=swg1IC70539 http://www-01.ibm.com/support/docview.wss?uid=swg1IC69986 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14687 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-3731

Vulnerability Summary

References

Vulmon Search

About

Products

Connect