According to its version, the installation of IBM DB2 Connect on the remote Windows host is either 9.7 prior to Fix Pack 11 Special Build 36621, 10.1 prior to Fix Pack 6 Special Build 36610, 10.5 prior to Fix Pack 8 Special Build 36605, or 11.1.2 prior to Fix Pack 2. It is, therefore, affected by the following vulnerabilities :

  - ユーザー指定入力の不適切な検証によるバッファオーバーフロー状態が存在します。A local attacker can exploit this to overwrite DB2 files or cause a denial of service condition. (CVE-2017-1105)

  - A stack-based buffer overflow condition exists in the Command Line Process (CLP) due to improper bounds checking. ローカルの攻撃者がこれを悪用して、任意のコードを実行する可能性があります。（CVE-2017-1297）

検出

IBM DB2 Connect 9.7 < FP11 Special Build 36621/10.1 < FP6 Special Build 36610/10.5 < FP8 Special Build 36605/11.1.2 < FP2の複数の脆弱性（Windows）

high Nessus プラグイン ID 101163

依存が見つかりません