IBM DB2 XML file leakage Vulnerability

Release date:
Updated on:

Affected Systems:
IBM DB2 9.x
Description:
--------------------------------------------------------------------------------
Cve id: CVE-2012-0713

IBM DB2 is a large-scale commercial relational database system for e-commerce, commercial information, content management, customer relationship management, and other applications, it can run on AIX, HP-UX, Linux, Solaris, Windows, and other systems.

Earlier than IBM DB2 9.5 Fix Pack 10 was implemented with security vulnerabilities that could be exploited by malicious users to leak sensitive information.

<* Source: vendor

Link: http://secunia.com/advisories/50314/
Http://www-01.ibm.com/support/docview.wss? Uid = swg21608683
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

IBM
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.ers.ibm.com/