Summary
IBM heeft meerdere kwetsbaarheden verholpen in IBM Guardium Data Protection versies 12.0, 12.1 en 12.2.
Details
Interpretaties
De kwetsbaarheden betreffen onder andere remote code execution via path traversal, meerdere SQL-injectieproblemen, en diverse buffer overflow kwetsbaarheden (heap-based, stack-based en buffer overrun) in verschillende componenten zoals de MongoDB protocol parser en de TDS PRELOGIN packet decoder. Aanvallers kunnen deze kwetsbaarheden misbruiken om zonder authenticatie willekeurige code uit te voeren, toegang te krijgen tot of manipulatie uit te voeren op gevoelige data, en denial-of-service condities te veroorzaken. De kwetsbaarheden zijn aanwezig in meerdere versies van het product en kunnen leiden tot compromittering van de integriteit, vertrouwelijkheid en beschikbaarheid van de systemen waarop Guardium draait.
Oplossingen
IBM heeft updates uitgebracht om de kwetsbaarheden in Guardium Data Protection te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Vulnerabilities 10
-
Critical 9.8
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal.
-
Critical 9.8
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection.
-
High 8.6
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end databas…
-
High 8.1
IBM Guardium Data Protection Buffer Overflow
IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, pot…
-
High 8.1
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
-
High 8.1
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.
-
High 8.1
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Col…
-
High 8.1
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
-
High 8.1
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
-
High 7.5
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
Revision history
-
#1.0.0
Initiele versie
References
-
Reference
https://www.ibm.com/support/pages/node/7291674