IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to obtain sensitive information using a race condition of a symbolic link. IBM X-Force ID: 179269.

According to its version, the installation of IBM DB2 running on the remote host is either 9.7 prior to Fix Pack 11 Special Build 40162, 10.1 prior to Fix Pack 6 Special Build 40161, 10.5 prior to Fix Pack 11 Special Build 40160, or 11.1 prior to Fix Pack 5 Special Build 40159, 11.5 prior to Mod 4 Fix Pack 0. It is, therefore, affected by one or more of the following vulnerabilities:

  - IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is     vulnerable to a denial of service, caused by improper handling of Secure Sockets Layer (SSL) renegotiation     requests. By sending specially-crafted requests, a remote attacker could exploit this vulnerability to     increase the resource usage on the system. (CVE-2020-4355)

  - IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is     vulnerable to a buffer overflow, caused by improper bounds checking which allows a local attacker to     execute arbitrary code on the system with root privileges. (CVE-2020-4363)

  - IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 allows a     local user to obtain sensitive information using a race condition of a symbolic link. (CVE-2020-4386,     CVE-2020-4387)

  - IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 allows a     local attacker to perform unauthorized actions on the system, caused by improper usage of shared memory.
    By sending a specially-crafted request, an attacker can exploit this vulnerability to obtain sensitive     information or cause a denial of service (DoS). (CVE-2020-4414)

  - IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could     allow an unauthenticated attacker to cause a denial of service due a hang in the execution of a terminate     command. (CVE-2020-4420)   Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
138333	IBM DB2 9.7 < FP11 40162 / 10.1 < FP6 40161 / 10.5 < FP11 40160 / 11.1 < FP5 40159 / 11.5 < Mod 4 FP0 Multiple Vulnerabilities (Windows)	Nessus	Windows	high
138332	IBM DB2 9.7 < FP11 40162 / 10.1 < FP6 40161 / 10.5 < FP11 40160 / 11.1 < FP5 40159 / 11.5 < Mod 4 FP0 Multiple Vulnerabilities (UNIX)	Nessus	Databases	high

Detections

Analytics

CVE-2020-4387

medium

Tenable Plugins

high

high