CVE-2011-0731

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-02-01 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the DB2 Administration Server (DAS) component in IBM DB2 9.1 before FP10, 9.5 before FP7, and 9.7 before FP3 on Linux, UNIX, and Windows allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

IBM Db2 for Linux, UNIX and Windows: through 9.1; through 9.5; through 9.7; 9.1, 9.1-fp1, 9.1-fp2, 9.1-fp2a, 9.1-fp3, 9.1-fp3a (+21)

References

http://secunia.com/advisories/43059
http://www-01.ibm.com/support/docview.wss?uid=swg1IC71203
http://www-01.ibm.com/support/docview.wss?uid=swg1IC72028
http://www-01.ibm.com/support/docview.wss?uid=swg1IC72029
http://www.osvdb.org/70683
http://www.securityfocus.com/bid/46052
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14699
http://secunia.com/advisories/43059
http://www-01.ibm.com/support/docview.wss?uid=swg1IC71203
http://www-01.ibm.com/support/docview.wss?uid=swg1IC72028
http://www-01.ibm.com/support/docview.wss?uid=swg1IC72029
http://www.osvdb.org/70683

Get alerted when CVE-2011-0731 or the next vulnerability affects your stack