CVE-2012-4826: Buffer Overflow
First published: Sat Oct 20 2012(Updated: )
Stack-based buffer overflow in the SQL/PSM (aka SQL Persistent Stored Module) Stored Procedure (SP) infrastructure in IBM DB2 9.1, 9.5, 9.7 before FP7, 9.8, and 10.1 might allow remote authenticated users to execute arbitrary code by debugging a stored procedure.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM DB2 Universal Database | =9.1 | |
| IBM DB2 Universal Database | =9.5 | |
| IBM DB2 Universal Database | =9.7 | |
| IBM DB2 Universal Database | =9.7.0.1 | |
| IBM DB2 Universal Database | =9.7.0.2 | |
| IBM DB2 Universal Database | =9.7.0.3 | |
| IBM DB2 Universal Database | =9.7.0.4 | |
| IBM DB2 Universal Database | =9.7.0.5 | |
| IBM DB2 Universal Database | =9.7.0.6 | |
| IBM DB2 Universal Database | =9.8 | |
| IBM DB2 Universal Database | =10.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://osvdb.org/86414
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC86765
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC86781
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC86782
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC86783
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC87192
- http://www-01.ibm.com/support/docview.wss?uid=swg21450666
- http://www-01.ibm.com/support/docview.wss?uid=swg21614536
- http://www.securityfocus.com/bid/56133
Frequently Asked Questions
What is the severity of CVE-2012-4826?
The severity of CVE-2012-4826 is considered high due to the possibility of remote code execution.
How do I fix CVE-2012-4826?
To fix CVE-2012-4826, you should apply the latest patches or updates provided by IBM for the affected versions of DB2.
What versions of IBM DB2 are affected by CVE-2012-4826?
CVE-2012-4826 affects IBM DB2 versions 9.1, 9.5, 9.7 (up to FP6), 9.8, and 10.1.
What kind of vulnerability is CVE-2012-4826?
CVE-2012-4826 is a stack-based buffer overflow vulnerability in the SQL/PSM Stored Procedure infrastructure.
Who can exploit CVE-2012-4826?
CVE-2012-4826 can be exploited by remote authenticated users who are able to debug stored procedures.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/weakness
- agent/author
- agent/severity
- agent/references
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm db2 universal database
- version/ibm db2 universal database/9.1
- version/ibm db2 universal database/9.5
- version/ibm db2 universal database/9.7
- version/ibm db2 universal database/9.7.0.1
- version/ibm db2 universal database/9.7.0.2
- version/ibm db2 universal database/9.7.0.3
- version/ibm db2 universal database/9.7.0.4
- version/ibm db2 universal database/9.7.0.5
- version/ibm db2 universal database/9.7.0.6
- version/ibm db2 universal database/9.8
- version/ibm db2 universal database/10.1