Lucene search
Ubuntu.comUB:CVE-2012-3324HistorySep 25, 2012 - 12:00 a.m.
CVE-2012-3324
2012-09-2500:00:00
ubuntu.com
ubuntu.com
10
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
0.002 Low
EPSS
Percentile
60.7%
Directory traversal vulnerability in the UTL_FILE module in IBM DB2 and DB2
Connect 10.1 before FP1 on Windows allows remote authenticated users to
modify, delete, or read arbitrary files via a pathname in the file field.
Notes
| Author | Note |
|---|---|
| sbeattie | DB2 is in the partner archive for the LTS releases |
References
Related
nvd
nvd
CVE-2012-3324
2012-09-25 20:55:01
prion
prion
Directory traversal
2012-09-25 20:55:00
openvas
openvas
IBM Db2 UTL_FILE Module Directory Traversal Vulnerability - Windows
2012-09-27 00:00:00
cvelist
cvelist
CVE-2012-3324
2012-09-25 20:00:00
ibm
ibm
cve
cve
CVE-2012-3324
2012-09-25 20:55:01
nessus
nessus
IBM DB2 10.1 < Fix Pack 1 Multiple Vulnerabilities
2012-09-28 00:00:00
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
0.002 Low
EPSS
Percentile
60.7%
Related for UB:CVE-2012-3324