IBM DB2 < 9.5 Fix Pack 1 Multiple Vulnerabilities

critical Nessus Plugin ID 33763

Language:

Synopsis

The remote database server is affected by multiple vulnerabilities.

Description

The installation of IBM DB2 9.5 running on the remote host does not have any Fix Packs applied. It is, therefore, affected by one or more of the following issues :

- There is a security vulnerability in the 'NNSTAT' procedure on Windows platforms only that allows low- privileged users to overwrite arbitrary files.
(IZ10776)

- There is a security vulnerability in the 'SYSPROC.ADMIN_SP_C' procedure on Windows platforms that allows users to load arbitrary library and execute arbitrary code in the system. (IZ10917)

- An unspecified vulnerability affects 'DB2WATCH' and 'DB2FREEZE' on Solaris platforms. (IZ12994)

- An authenticated, remote user can cause the DB2 instance to crash by passing specially crafted parameters to the 'RECOVERJAR' and 'REMOVE_JAR' procedures. (IZ15496)

- There is an internal buffer overflow vulnerability in the DAS process that could allow arbitrary code execution on the affected host. (IZ12406)

- A local attacker can create arbitrary files as root on Unix and Linux platforms using symlinks to the 'dasRecoveryIndex', 'dasRecoveryIndex.tmp', '.dasRecoveryIndex.lock', and 'dasRecoveryIndex.cor' files during initialization. (IZ12798)

- There are possible buffer overflows involving 'XQUERY', 'XMLQUERY', 'XMLEXISTS', and 'XMLTABLE'. (IZ18431)

- There is a security vulnerability related to a failure to switch the owner of the 'db2fmp' process affecting Unix and Linux platforms. (IZ19155)

- When a memory dump occurs, the password used to connect to the database remains visible in plaintext in the memory dump file. (JR28314)

- The CLR stored procedure deployment feature of IBM Database Add-Ins for Visual Studio can be used to escalate privileges or launch a denial of service attack against a DB2 server. (JR28431)

- A flaw exists in the db2ls command that allows a local attacker to write to any file on the system through the use of symbolic links. Note that this issue does not affect Windows systems. (IZ14939)

Solution

Apply IBM DB2 version 9.5 Fix Pack 1.

Plugin Details

Severity: Critical

ID: 33763

File Name: db2_95fp1.nasl

Version: 1.28

Type: remote

Family: Databases

Published: 7/30/2008

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:ibm:db2

Exploit Ease: No known exploits are available

Reference Information

CVE: CVE-2008-1966, CVE-2008-1997, CVE-2008-1998, CVE-2008-3852, CVE-2008-3854

BID: 28835, 28836, 28843

CWE: 119, 264, 94

Detections

Analytics