IBM DB2 Multiple File leakage Security Restriction Bypass and Stack Buffer Overflow Vulnerability

Release date:
Updated on:

Affected Systems:
IBM DB2 9.7 Fix Pack 6 0
Description:
--------------------------------------------------------------------------------
Bugtraq id: 54487
Cve id: CVE-2012-2194, CVE-2012-2196, CVE-2012-2197

IBM DB2 is a large-scale commercial relational database system for e-commerce, commercial information, content management, customer relationship management, and other applications, it can run on AIX, HP-UX, Linux, Solaris, Windows, and other systems.

IBM DB2 has multiple security restriction bypass vulnerabilities. Attackers can exploit these vulnerabilities to execute arbitrary code, leak sensitive information, or bypass certain security restrictions.

<* Source: vendor
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

IBM
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.ers.ibm.com/