IBM DB2 UTL_FILE Module Directory Traversal Vulnerability (Windows)

  1. Network Vulnerabilities
  2. Databases
  3. IBM DB2 UTL_FILE Module Directory Traversal Vulnerability (Windows)
Summary
The host is running IBM DB2 and is prone to directory traversal vulnerability.
Impact
Successful exploitation allows remote users to modify, delete or read arbitrary files via a pathname in the file field. Impact Level: Application
Solution
Upgrade to IBM DB2 version 10.1 FP1 or later, For updates refer to http://www-01.ibm.com/support/docview.wss?uid=swg1IC85513
Insight
The flaw is caused due an improper validation of user-supplied input by routines within the UTL_FILE module. Which allows attackers to read arbitrary files.
Affected
IBM DB2 version 10.1 before FP1 on Windows
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities