CVE-2012-2196

Publication date 25 July 2012

Last updated 24 July 2024

Ubuntu priority

Description

IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to read arbitrary XML files via the (1) GET_WRAP_CFG_C or (2) GET_WRAP_CFG_C2 stored procedure.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
db2exc	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.10 utopic	Not in release
	14.04 LTS trusty	Not in release
	13.10 saucy	Not in release
	13.04 raring	Not in release
	12.10 quantal	Not in release
	12.04 LTS precise	Ignored end of life
	11.10 oneiric	Not in release
	11.04 natty	Not in release
	10.04 LTS lucid	Ignored end of life
	8.04 LTS hardy	Ignored end of life

How can I get the fixes?
What do statuses mean?

Notes

tyhicks

A fix pack for 9.7 is not yet available as of 2012-07-25

References

MITRE
NVD
Launchpad
Debian

Other references

http://www-01.ibm.com/support/docview.wss?uid=swg21600837
http://www-01.ibm.com/support/docview.wss?uid=swg1IC84751
http://www-01.ibm.com/support/docview.wss?uid=swg1IC84750
http://www-01.ibm.com/support/docview.wss?uid=swg1IC84748
http://www-01.ibm.com/support/docview.wss?uid=swg1IC84712
http://www-01.ibm.com/support/docview.wss?uid=swg1IC84614
https://www.cve.org/CVERecord?id=CVE-2012-2196