Directory traversal vulnerability in the UTL_FILE module in IBM DB2 and DB2 Connect 10.1 before FP1 on Windows allows remote authenticated users to modify, delete, or read arbitrary files via a pathname in the file field.
References
Link | Resource |
---|---|
http://www-01.ibm.com/support/docview.wss?uid=swg1IC85513 | Vendor Advisory |
http://www-01.ibm.com/support/docview.wss?uid=swg21611040 | Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/77924 |
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2012-09-25 20:55
Updated : 2024-02-28 12:00
NVD link : CVE-2012-3324
Mitre link : CVE-2012-3324
CVE.ORG link : CVE-2012-3324
JSON object : View
Products Affected
microsoft
- windows_2003_server
- windows_7
- windows_vista
- windows_xp
- windows_2000
- windows_server_2008
ibm
- db2
- db2_connect
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')