CVE-2012-2194

Publication date 25 July 2012

Last updated 24 July 2024

Ubuntu priority

Description

Directory traversal vulnerability in the SQLJ.DB2_INSTALL_JAR stored procedure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to replace JAR files via unspecified vectors.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
db2exc	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.10 utopic	Not in release
	14.04 LTS trusty	Not in release
	13.10 saucy	Not in release
	13.04 raring	Not in release
	12.10 quantal	Not in release
	12.04 LTS precise	Ignored end of life
	11.10 oneiric	Not in release
	11.04 natty	Not in release
	10.04 LTS lucid	Ignored end of life
	8.04 LTS hardy	Ignored end of life

How can I get the fixes?
What do statuses mean?

Notes

tyhicks

A fix pack for 9.7 is not yet available as of 2012-07-25

References

MITRE
NVD
Launchpad
Debian

Other references

http://www-01.ibm.com/support/docview.wss?uid=swg21600837
http://www-01.ibm.com/support/docview.wss?uid=swg1IC84716
http://www-01.ibm.com/support/docview.wss?uid=swg1IC84715
http://www-01.ibm.com/support/docview.wss?uid=swg1IC84714
http://www-01.ibm.com/support/docview.wss?uid=swg1IC84711
http://www-01.ibm.com/support/docview.wss?uid=swg1IC84019
https://www.cve.org/CVERecord?id=CVE-2012-2194