CVE:CVE-2012-0204
CNNVD:CNNVD-201301-587
IBM InfoSphere Information Server是美国IBM公司的一套数据整合平台。该平台可用于整合各种渠道获取的数据信息。
IBM InfoSphere Information Server 8.1，8.5 FP3之前版本，8.7以及9.1版本中InfoSphere Information Server MetaBrokers & Bridges (MBB)中的InfoSphere Import Export Manager 8.1至9.1版本中存在不可信搜索路径漏洞。通过当前工作目录下的Trojan木马DLL文件，本地攻击者利用该漏洞获得特权。
solution:Upgrade ibm infosphere_import_export_manager to a higher version than 8.1,8.1.1,8.1.2,8.5,8.7,9.1,and avoid the version 8.1,8.1.1,8.1.2,8.5,8.7,9.1; Upgrade ibm infosphere_information_server to a higher version than 8.1,8.5,8.5.0.1,8.5.0.2,8.7,9.1,and avoid the version 8.1,8.5,8.5.0.1,8.5.0.2,8.7,9.1; Upgrade ibm infosphere_information_server_metabrokers_&_bridges to a higher version than -