CVE-2013-3475

EPSS 0.09%
Veröffentlicht 05.06.2013 03:43:48
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle PSIRT-CNA@flexerasoftware.com
Teams Watchlist Login
Unerledigt Login

Stack-based buffer overflow in db2aud in the Audit Facility in IBM DB2 and DB2 Connect 9.1, 9.5, 9.7, 9.8, and 10.1, as used in Smart Analytics System 7600 and other products, allows local users to gain privileges via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 13

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Db2 Version9.1

Ibm ≫ Db2 Version9.5

Ibm ≫ Db2 Version9.7

Ibm ≫ Db2 Version9.8

Ibm ≫ Db2 Version10.1

Ibm ≫ Db2 Connect Version9.1

Ibm ≫ Db2 Connect Version9.5

Ibm ≫ Db2 Connect Version9.7

Ibm ≫ Db2 Connect Version9.8

Ibm ≫ Db2 Connect Version10.1

Ibm ≫ Smart Analytics System 7600 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.09%	0.221

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/52663

Vendor Advisory

http://secunia.com/advisories/53704

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1IC92463

http://www-01.ibm.com/support/docview.wss?uid=swg1IC92495

http://www-01.ibm.com/support/docview.wss?uid=swg1IC92496

http://www-01.ibm.com/support/docview.wss?uid=swg1IC92498

http://www-01.ibm.com/support/docview.wss?uid=swg21639194

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21639355

Vendor Advisory