危険度: 中
  CVE識別番号: CVE-2008-2154
  情報公開日: 2 15, 2011

  概要

IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 provides an INSTALL_JAR (aka sqlj.install_jar) procedure, which allows remote authenticated users to create or overwrite arbitrary files via unspecified calls.

  トレンドマイクロの対策

Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.

  対応方法

  Trend Micro Deep Security DPI Rule Number: 1004490
  Trend Micro Deep Security DPI Rule Name: 1004490 - IBM DB2 Universal Database Server 'INSTALL_JAR' Arbitrary File Overwrite Vulnerability

  影響を受けるソフトウェア

  • IBM DB2 9.1
  • IBM DB2 9.5
  • IBM DB2 8.0