ID de Prueba:	1.3.6.1.4.1.25623.1.0.805940
Categoría:	Databases
Título:	IBM DB2 Multiple Vulnerabilities - July15
Resumen:	IBM DB2 is prone to multiple vulnerabilities.
Descripción:	Summary: IBM DB2 is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - An error in the scalar-function implementation. - An error in the Data Movement implementation. - An error allowing crafted use of an automated-maintenance policy stored procedure to read certain administrative files. - An unspecified error in an unspecified scalar function. - An error allowing crafted XML/XSLT function in a SELECT statement to read arbitrary text files. Vulnerability Impact: Successful exploitation will allow attacker to bypass security restrictions, gain access to sensitive data and cause the server to terminate abnormally causing a denial of service or potentially execute arbitrary code. Affected Software/OS: IBM Db2 versions 9.7 through FP10, 9.8 through FP5, 10.1 before FP5 and 10.5 through FP5. Solution: Apply the appropriate fix from the referenced advisories. CVSS Score: 8.0 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:C
Referencia Cruzada:	BugTraq ID: 75908 BugTraq ID: 75911 BugTraq ID: 75946 BugTraq ID: 75947 BugTraq ID: 75949 Common Vulnerability Exposure (CVE) ID: CVE-2015-1935 AIX APAR: IT08543 http://www-01.ibm.com/support/docview.wss?uid=swg1IT08543 AIX APAR: IT08656 http://www-01.ibm.com/support/docview.wss?uid=swg1IT08656 AIX APAR: IT08667 http://www-01.ibm.com/support/docview.wss?uid=swg1IT08667 AIX APAR: IT08668 http://www-01.ibm.com/support/docview.wss?uid=swg1IT08668 http://www.securityfocus.com/bid/75908 http://www.securitytracker.com/id/1033063 Common Vulnerability Exposure (CVE) ID: CVE-2015-1922 AIX APAR: IT08523 http://www-01.ibm.com/support/docview.wss?uid=swg1IT08523 AIX APAR: IT08524 http://www-01.ibm.com/support/docview.wss?uid=swg1IT08524 AIX APAR: IT08525 http://www-01.ibm.com/support/docview.wss?uid=swg1IT08525 AIX APAR: IT08526 http://www-01.ibm.com/support/docview.wss?uid=swg1IT08526 http://www.securityfocus.com/bid/75911 http://www.securitytracker.com/id/1032879 Common Vulnerability Exposure (CVE) ID: CVE-2015-1883 AIX APAR: IT08075 http://www-01.ibm.com/support/docview.wss?uid=swg1IT08075 AIX APAR: IT08080 http://www-01.ibm.com/support/docview.wss?uid=swg1IT08080 AIX APAR: IT08085 http://www-01.ibm.com/support/docview.wss?uid=swg1IT08085 AIX APAR: IT08086 http://www-01.ibm.com/support/docview.wss?uid=swg1IT08086 http://www.securityfocus.com/bid/75946 http://www.securitytracker.com/id/1032881 Common Vulnerability Exposure (CVE) ID: CVE-2015-0157 AIX APAR: IT07103 http://www-01.ibm.com/support/docview.wss?uid=swg1IT07103 AIX APAR: IT07107 http://www-01.ibm.com/support/docview.wss?uid=swg1IT07107 AIX APAR: IT07108 http://www-01.ibm.com/support/docview.wss?uid=swg1IT07108 AIX APAR: IT07109 http://www-01.ibm.com/support/docview.wss?uid=swg1IT07109 http://www.securityfocus.com/bid/75947 http://www.securitytracker.com/id/1032882 Common Vulnerability Exposure (CVE) ID: CVE-2014-8910 AIX APAR: IT06353 http://www-01.ibm.com/support/docview.wss?uid=swg1IT06353 AIX APAR: IT06354 http://www-01.ibm.com/support/docview.wss?uid=swg1IT06354 AIX APAR: IT06355 http://www-01.ibm.com/support/docview.wss?uid=swg1IT06355 AIX APAR: IT06356 http://www-01.ibm.com/support/docview.wss?uid=swg1IT06356 http://www.securityfocus.com/bid/75949 http://www.securitytracker.com/id/1032883
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.