CVE

Id
27633  
CVE No.
CVE-2007-4276  
Status
Candidate  
Description
Stack-based buffer overflow in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows attackers to execute arbitrary code via a long DASPROF and possibly other environment variables, which are copied into the buildDasPaths buffer.  
Phase
Assigned (20070809)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
284405 27633 CVE-2007-4276 IDEFENSE:20070816 IBM DB2 Universal Database buildDasPaths Buffer Overflow Vulnerability  View
284406 27633 CVE-2007-4276 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=583  View
284407 27633 CVE-2007-4276 CONFIRM:http://www-1.ibm.com/support/docview.wss?uid=swg21255352  View
284408 27633 CVE-2007-4276 CONFIRM:http://www-1.ibm.com/support/docview.wss?uid=swg21255607  View
284409 27633 CVE-2007-4276 AIXAPAR:IY97346  View
284410 27633 CVE-2007-4276 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1IY97346  View
284411 27633 CVE-2007-4276 AIXAPAR:IY99311  View
284412 27633 CVE-2007-4276 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1IY99311  View
284413 27633 CVE-2007-4276 VIM:20070818 Recent DB2 Vulnerabilities  View
284414 27633 CVE-2007-4276 URL:http://www.attrition.org/pipermail/vim/2007-August/001765.html  View
284415 27633 CVE-2007-4276 BID:25339  View
284416 27633 CVE-2007-4276 URL:http://www.securityfocus.com/bid/25339  View
284417 27633 CVE-2007-4276 VUPEN:ADV-2007-2912  View
284418 27633 CVE-2007-4276 URL:http://www.vupen.com/english/advisories/2007/2912  View
284419 27633 CVE-2007-4276 SECTRACK:1018581  View
284420 27633 CVE-2007-4276 URL:http://securitytracker.com/id?1018581  View
284421 27633 CVE-2007-4276 SECUNIA:26471  View
284422 27633 CVE-2007-4276 URL:http://secunia.com/advisories/26471  View
284423 27633 CVE-2007-4276 XF:db2-environment-variables-bo(36067)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53797 JVNDB-2007-002489 ESRI ArcSDE サービスの giomgr プロセスにおけるスタックベースのバッファオーバーフローの脆弱性 ArcGIS で使用される ESRI ArcSDE サービスの giomgr プロセスには、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-4278 27633 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002489.html  View