CVE-2007-4423: Buffer Overflow
Published Aug 18, 2007
·Updated
Stack-based buffer overflow in the AUTHLISTGROUPSFORAUTHID function in IBM DB2 UDB 9.1 before Fixpak 3 allows attackers to cause a denial of service and possibly execute arbitrary code via a long argument.
Affected Software
3 affected components
IBM DB2 Universal Database=8.0
IBM DB2 Universal Database=9.0
IBM DB2 Universal Database=9.1
Remediation
Patch Available
Patch Available
Event History
Aug 18, 2007
CVE Published
09:17 PM
Aug 19, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4423?
CVE-2007-4423 is a critical vulnerability due to its potential to cause a denial of service and execute arbitrary code.
2
How do I fix CVE-2007-4423?
To fix CVE-2007-4423, upgrade IBM DB2 UDB to version 9.1 Fixpak 3 or later.
3
What are the affected versions in CVE-2007-4423?
CVE-2007-4423 affects IBM DB2 Universal Database versions 8.0 and 9.0, as well as 9.1 before Fixpak 3.
4
What type of vulnerability is CVE-2007-4423?
CVE-2007-4423 is a stack-based buffer overflow vulnerability.
5
Can CVE-2007-4423 be exploited remotely?
Yes, CVE-2007-4423 can be exploited remotely through a long argument passed to the vulnerable function.