Vulnerability Details : CVE-2012-0711
Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow.
Vulnerability category: OverflowExecute code
Products affected by CVE-2012-0711
- cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.1:fp2a:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.1:fp6a:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.1:fp7:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.5:fp4:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.5:fp4a:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.5:fp5:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.7:fp1:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.1:fp7a:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.1:fp8:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.5:fp6:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.7:fp2:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.5:fp6a:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.7:fp3a:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.7:fp4:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.5:fp7:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.5:fp8:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.7:fp5:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.7:fp3:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.1:fp9:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.1:fp10:*:*:*:*:*:*When used together with: Linux » Linux Kernel
- cpe:2.3:a:ibm:db2:9.1:fp11:*:*:*:*:*:*When used together with: Linux » Linux Kernel
Exploit prediction scoring system (EPSS) score for CVE-2012-0711
11.56%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 95 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2012-0711
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
CWE ids for CVE-2012-0711
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-0711
-
http://www-01.ibm.com/support/docview.wss?uid=swg1IC80729
IBM IC80729: SECURITY: REMOTE ESCALATION OF PRIVILEGE VULNERABILITY IN DAS (CVE-2012-0711).
-
http://www-01.ibm.com/support/docview.wss?uid=swg21588093
IBM Security Bulletin: Remote Escalation of Privilege Vulnerability in DB2 Administration Server (CVE-2012-0711)Vendor Advisory
-
http://www.securityfocus.com/bid/77826
DB2 Universal Database CVE-2012-0711 Remote Security Vulnerability
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/73495
IBM DB2 db2dasrrm buffer overflow CVE-2012-0711 Vulnerability Report
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14842
Repository / Oval Repository
-
http://www-01.ibm.com/support/docview.wss?uid=swg1IC80561
IBM IC80561: SECURITY: REMOTE ESCALATION OF PRIVILEGE VULNERABILITY IN DAS (CVE-2012-0711).
-
http://www-01.ibm.com/support/docview.wss?uid=swg1IC80728
IBM IC80728: SECURITY: REMOTE ESCALATION OF PRIVILEGE VULNERABILITY IN DAS (CVE-2012-0711).
Jump to