Data is a CGI program that handles requests from Web clients. This vulnerability may allow a remote attacker to execute arbitrary code under the privileges of a Web server or to crash a Web server. All versions are affected.
Data allows Web applications to interface with a variety of database systems.
Data powers other IBM applications such as Net. Commerce and WebSphere Commerce Suite. The stack of a function is overflowed by this long variable causing the return address to be overwritten. This vulnerability may allow an attacker to execute arbitrary code with the privileges of the running Web server process. Data may run in the same address space of the Web server by using Web server APIs, it may be possible to completely crash a Web server under some configurations.