Test ID:	1.3.6.1.4.1.25623.1.0.812268
Category:	Databases
Title:	IBM Db2 Stack Buffer Overflow Vulnerability (Dec 2017)
Summary:	IBM Db2 is prone to stack buffer overflow vulnerability.
Description:	Summary: IBM Db2 is prone to stack buffer overflow vulnerability. Vulnerability Insight: The flaw exists due to an improper bounds checking in the handling of the ALTER MODULE statement. Vulnerability Impact: Successful exploitation will allow an attacker to execute arbitrary code with Db2 instance owner privileges. Failed attempts will likely cause a denial-of-service condition. Affected Software/OS: IBM Db2 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4. Solution: Apply the appropriate fix from reference link CVSS Score: 8.5 CVSS Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3094 AIX APAR: IT02291 http://www-01.ibm.com/support/docview.wss?uid=swg1IT02291 AIX APAR: IT02592 http://www-01.ibm.com/support/docview.wss?uid=swg1IT02592 AIX APAR: IT02593 http://www-01.ibm.com/support/docview.wss?uid=swg1IT02593 AIX APAR: IT02594 http://www-01.ibm.com/support/docview.wss?uid=swg1IT02594 BugTraq ID: 69550 http://www.securityfocus.com/bid/69550 http://secunia.com/advisories/58616 http://secunia.com/advisories/60845 XForce ISS Database: ibm-db2-cve20143094-bo(94260) https://exchange.xforce.ibmcloud.com/vulnerabilities/94260
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.