CVE-2012-0711

IBM DB2 9.1-9.7 - Remote Code Execution via db2dasrrm Integer Signedness Error

Title source: llm
STIX 2.1

Description

Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow.

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/73495
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14842
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/77826
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21588093
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IC80728
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IC80729
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IC80561

Scores

EPSS 0.0458
EPSS Percentile 90.6%

Details

CWE
CWE-189
Status published
Products (3)
ibm/db2 9.1 (17 CPE variants)
ibm/db2 9.5 (14 CPE variants)
ibm/db2 9.7 (7 CPE variants)
Published Mar 20, 2012
Tracked Since Feb 18, 2026