Test ID:	1.3.6.1.4.1.25623.1.0.803106
Category:	Databases
Title:	IBM Db2 SQL/PSM Stored Procedure Debugging Buffer Overflow Vulnerability - Windows
Summary:	IBM Db2 is prone to a buffer overflow vulnerability.
Description:	Summary: IBM Db2 is prone to a buffer overflow vulnerability. Vulnerability Insight: The Stored Procedure (SP) infrastructure fails to properly sanitize user-supplied input when debugging stored procedures, which will result in a stack-based buffer overflow. Vulnerability Impact: Successful exploitation allows remote attackers to execute arbitrary code. Affected Software/OS: IBM Db2 versions 9.1, 9.5, 9.7 before FP7 and 10.1 on Windows Solution: Upgrade to IBM Db2 version 9.7 FP7 or later. CVSS Score: 8.5 CVSS Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4826 AIX APAR: IC86765 http://www-01.ibm.com/support/docview.wss?uid=swg1IC86765 AIX APAR: IC86781 http://www-01.ibm.com/support/docview.wss?uid=swg1IC86781 AIX APAR: IC86782 http://www-01.ibm.com/support/docview.wss?uid=swg1IC86782 AIX APAR: IC86783 http://www-01.ibm.com/support/docview.wss?uid=swg1IC86783 AIX APAR: IC87192 http://www-01.ibm.com/support/docview.wss?uid=swg1IC87192 BugTraq ID: 56133 http://www.securityfocus.com/bid/56133 http://osvdb.org/86414
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.