CVE

Id
46315  
CVE No.
CVE-2010-3731  
Status
Candidate  
Description
Stack-based buffer overflow in the validateUser implementation in the com.ibm.db2.das.core.DasSysCmd function in db2dasrrm in the DB2 Administration Server (DAS) component in IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP3 allows remote attackers to execute arbitrary code via a long username string.  
Phase
Assigned (20101005)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
505091 46315 CVE-2010-3731 MISC:http://www.zerodayinitiative.com/advisories/ZDI-11-035  View
505092 46315 CVE-2010-3731 CONFIRM:ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT  View
505093 46315 CVE-2010-3731 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21426108  View
505094 46315 CVE-2010-3731 AIXAPAR:IC70538  View
505095 46315 CVE-2010-3731 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IC70538  View
505096 46315 CVE-2010-3731 AIXAPAR:IC69986  View
505097 46315 CVE-2010-3731 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IC69986  View
505098 46315 CVE-2010-3731 AIXAPAR:IC70539  View
505099 46315 CVE-2010-3731 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IC70539  View
505100 46315 CVE-2010-3731 BID:46077  View
505101 46315 CVE-2010-3731 URL:http://www.securityfocus.com/bid/46077  View
505102 46315 CVE-2010-3731 OVAL:oval:org.mitre.oval:def:14687  View
505103 46315 CVE-2010-3731 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14687  View
505104 46315 CVE-2010-3731 SECUNIA:41686  View
505105 46315 CVE-2010-3731 URL:http://secunia.com/advisories/41686  View
505106 46315 CVE-2010-3731 VUPEN:ADV-2010-2544  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37434 JVNDB-2010-003219 IBM DB2 UDB の Query Compiler コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 IBM DB2 UDB の Query Compiler、Rewrite および Optimizer コンポーネントには、サービス運用妨害 (CPU 資源の消費) 状態となる脆弱性が存在します。 CVE-2010-3735 46315 2.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003219.html  View