Directory traversal vulnerability in the SQLJ.DB2_INSTALL_JAR stored procedure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to replace JAR files via unspecified vectors.

According to its version, the installation of IBM DB2 9.7 running on the remote host is prior to Fix Pack 7. It is, therefore, affected by one or more of the following issues :

  - An error exists related to the stored procedure     'SQLJ.DB2_INSTALL_JAR' that can allow 'JAR' files to be     overwritten. Note that this issue only affects Windows     hosts. (#IC84711, CVE-2012-2194)

  - An error exists related to the stored procedures     'GET_WRAP_CFG_C' and 'GET_WRAP_CFG_C2' that can allow     unauthorized access to XML files. (#IC84712,     CVE-2012-2196)

  - An error exists related to the Java stored procedure     infrastructure that can allow stack-based buffer     overflows. (#IC84752, CVE-2012-2197)

  - An error exists related to the SQL/Persistent Stored     Module (PSM) stored procedure infrastructure that can     allow stack-based buffer overflows. (#IC86781,     CVE-2012-4826)

According to its version, the installation of IBM DB2 9.5 running on the remote host is affected by one or more of the following issues :

  - An unspecified information disclosure error exists     related to the XML feature that can allow improper     access to arbitrary XML files. (#IC81461, CVE-2012-0713)

  - An error exists related to the stored procedure     'SQLJ.DB2_INSTALL_JAR' that can allow 'JAR' files to be     overwritten. Note that this issue only affects Windows     hosts. (#IC84711, CVE-2012-2194)

  - An error exists related to the stored procedures     'GET_WRAP_CFG_C' and 'GET_WRAP_CFG_C2' that can allow     unauthorized access to XML files. (#IC84712,     CVE-2012-2196)

  - An error exists related to the Java stored procedure     infrastructure that can allow stack-based buffer     overflows. (#IC84752, CVE-2012-2197)

According to its version, the installation of DB2 10.1 running on the remote host is affected by one or more of the following issues :

  - An error exists in the stored procedure     'SQLJ.DB2_INSTALL_JAR' that can allow unauthorized     replacement of Jar files. Note this vulnerability only     affects the Windows platform. (#IC84716 / CVE-2012-2194)

  - An error exists in the stored procedures     'GET_WRAP_CFG_C' and 'GET_WRAP_CFG_C2' that can allow     unauthorized reading of XML files.
    (#IC84751 / CVE-2012-2196)

  - A stack-based buffer overflow exists in the Java     stored procedure infrastructure.
    (#IC84755 / CVE-2012-2197)

  - An error exists in the 'UTL_FILE' module that can allow     read, write and delete access to files outside the     intended directory. Note this vulnerability only     affects the Windows platform. (#IC85513 / CVE-2012-3324)

According to its version, the installation of IBM DB2 9.1 running on the remote host is affected by one or more of the following issues :

  - An integer signedness error exists in the 'db2asrrm'     process that can lead to a heap-based buffer overflow.
    Note that this issue does not affect Windows hosts.
    (#IC80561 / CVE-2012-0711)

  - An error exists related to the stored procedure     'SQLJ.DB2_INSTALL_JAR' that can allow 'JAR' files to be     overwritten. Note that this issue only affects Windows     hosts. (#IC84019 / CVE-2012-2194)

  - An error exists related to the stored procedures     'GET_WRAP_CFG_C' and 'GET_WRAP_CFG_C2' that can allow     unauthorized access to XML files. (#IC84614 /     CVE-2012-2196)

  - An error exists related to the Java stored procedure     infrastructure that can allow stack-based buffer     overflows. (#IC84555 / CVE-2012-2197)

ID	Name	Product	Family	Severity
62701	IBM DB2 9.7 < Fix Pack 7 Multiple Vulnerabilities	Nessus	Databases	high
62629	IBM DB2 9.5 < Fix Pack 10 Multiple Vulnerabilities	Nessus	Databases	high
62369	IBM DB2 10.1 < Fix Pack 1 Multiple Vulnerabilities	Nessus	Databases	critical
60098	IBM DB2 9.1 < Fix Pack 12 Multiple Vulnerabilities	Nessus	Databases	high

Detections

Analytics

CVE-2012-2194

medium

Tenable Plugins

high

high

critical

high