CVE-2010-0462

Heap-based buffer overflow in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows remote authenticated users to have an unspecified impact via a SELECT statement that has a long column name generated with the REPEAT function.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp2a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp6a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp7:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp7a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp8:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:fp4:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:fp4a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:fp5:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7:fp1:*:*:*:*:*:*

History

21 Nov 2024, 01:12

Type Values Removed Values Added
References () ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - () ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT -
References () http://intevydis.blogspot.com/2010/01/ibm-db2-97-heap-overflow.html - Exploit () http://intevydis.blogspot.com/2010/01/ibm-db2-97-heap-overflow.html - Exploit
References () http://securitytracker.com/id?1023509 - () http://securitytracker.com/id?1023509 -
References () http://www-01.ibm.com/support/docview.wss?uid=swg1IC65922 - () http://www-01.ibm.com/support/docview.wss?uid=swg1IC65922 -
References () http://www-01.ibm.com/support/docview.wss?uid=swg1IC65933 - () http://www-01.ibm.com/support/docview.wss?uid=swg1IC65933 -
References () http://www-01.ibm.com/support/docview.wss?uid=swg1IC65935 - () http://www-01.ibm.com/support/docview.wss?uid=swg1IC65935 -
References () http://www-01.ibm.com/support/docview.wss?uid=swg21426108 - () http://www-01.ibm.com/support/docview.wss?uid=swg21426108 -
References () http://www-01.ibm.com/support/docview.wss?uid=swg21432298 - () http://www-01.ibm.com/support/docview.wss?uid=swg21432298 -
References () http://www.securityfocus.com/bid/37976 - Exploit () http://www.securityfocus.com/bid/37976 - Exploit
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/55899 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/55899 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14518 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14518 -

Information

Published : 2010-01-28 20:30

Updated : 2024-11-21 01:12


NVD link : CVE-2010-0462

Mitre link : CVE-2010-0462

CVE.ORG link : CVE-2010-0462


JSON object : View

Products Affected

ibm

  • db2
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer