CVE-2012-3324: Path Traversal
Directory traversal vulnerability in the UTLFILE module in IBM DB2 and DB2 Connect 10.1 before FP1 on Windows allows remote authenticated users to modify, delete, or read arbitrary files via a pathname in the file field.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3324?
CVE-2012-3324 is considered a medium severity vulnerability due to its potential to allow unauthorized access to files.
How do I fix CVE-2012-3324?
To remediate CVE-2012-3324, upgrade to IBM DB2 version 10.1 FP1 or later where the vulnerability is addressed.
Who is affected by CVE-2012-3324?
CVE-2012-3324 affects remote authenticated users of IBM DB2 and DB2 Connect 10.1 on Windows before FP1.
What types of attacks can CVE-2012-3324 facilitate?
CVE-2012-3324 can facilitate directory traversal attacks, allowing modification, deletion, or reading of arbitrary files.
Is CVE-2012-3324 applicable to all versions of IBM DB2?
No, CVE-2012-3324 specifically applies to versions of IBM DB2 and DB2 Connect 10.1 prior to FP1 on Windows.