CVE-2012-3324

Currently unrated

Key Information:

Vendor
IBM
Status
Db2
Db2 Connect
Vendor
CVE Published:
25 September 2012

Summary

Directory traversal vulnerability in the UTL_FILE module in IBM DB2 and DB2 Connect 10.1 before FP1 on Windows allows remote authenticated users to modify, delete, or read arbitrary files via a pathname in the file field.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21611040
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/77924
vdb-entryx_refsource_XF
http://www-01.ibm.com/support/docview.wss?uid=swg1IC85513
vendor-advisoryx_refsource_AIXAPAR

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.