Detections
Analytics
IBM DB2 Connect 9.7 < FP11 Special Build 36621 / 10.1 < FP6 Special Build 36610 / 10.5 < FP8 Special Build 36605 / 11.1.2 < FP2 Multiple Vulnerabilities (Windows)
high Nessus Plugin ID 101163
Language:
Synopsis
The remote database server is affected by multiple vulnerabilities.Description
According to its version, the installation of IBM DB2 Connect on the remote Windows host is either 9.7 prior to Fix Pack 11 Special Build 36621, 10.1 prior to Fix Pack 6 Special Build 36610, 10.5 prior to Fix Pack 8 Special Build 36605, or 11.1.2 prior to Fix Pack 2. It is, therefore, affected by the following vulnerabilities :- A buffer overflow condition exists due to improper validation of user-supplied input. A local attacker can exploit this to overwrite DB2 files or cause a denial of service condition. (CVE-2017-1105)
- A stack-based buffer overflow condition exists in the Command Line Process (CLP) due to improper bounds checking. A local attacker can exploit this to execute arbitrary code. (CVE-2017-1297)
Solution
Apply the appropriate IBM DB2 Connect Fix Pack or Special Build based on the most recent fix pack level for your branch.See Also
Plugin Details
Severity: High
ID: 101163
File Name: db2_connect_1112fp2_win.nasl
Version: 1.6
Type: local
Agent: windows
Family: Windows
Published: 6/30/2017
Updated: 11/12/2019
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Medium
Base Score: 4.4
Temporal Score: 3.4
Vector: CVSS2#AV:L/AC:M/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2017-1297
CVSS v3
Risk Factor: High
Base Score: 7.3
Temporal Score: 6.6
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:ibm:db2_connect
Required KB Items: SMB/db2_connect/Installed
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 6/22/2017
Vulnerability Publication Date: 6/22/2017
Reference Information
CVE: CVE-2017-1105, CVE-2017-1297