ID de Prueba:	1.3.6.1.4.1.25623.1.0.902174
Categoría:	Databases
Título:	IBM Db2 REPEAT Buffer Overflow and TLS Renegotiation Vulnerabilities (Linux)
Resumen:	IBM DB2 is prone to a buffer overflow and TLS renegotiation vulnerabilities.
Descripción:	Summary: IBM DB2 is prone to a buffer overflow and TLS renegotiation vulnerabilities. Vulnerability Insight: The flaws are due to: - Buffer overflow error within the scalar function 'REPEAT', which could allow malicious users to cause a vulnerable server to crash. - An error in the 'TLS' implementation while handling session 're-negotiations' which can be exploited to insert arbitrary plaintext into an existing TLS session via Man-in-the-Middle (MitM) attacks. Vulnerability Impact: Successful exploitation will allow attacker to cause a denial of service or to bypass security restrictions. Affected Software/OS: IBM Db2 version 9.1 prior to FP9. Solution: Update IBM Db2 9.1 FP9. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1560 AIX APAR: IC65922 http://www-01.ibm.com/support/docview.wss?uid=swg1IC65922 http://osvdb.org/64041 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14613 http://secunia.com/advisories/39500 http://attrition.org/pipermail/vim/2010-April/002341.html http://www.vupen.com/english/advisories/2010/0982 XForce ISS Database: db2-repeat-dos(58070) https://exchange.xforce.ibmcloud.com/vulnerabilities/58070
Copyright	Copyright (C) 2010 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.