Mageni Mageni Security LLC

Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

IBM DB2 Multiple Vulnerabilities - Dec09 (Linux)

Information

Severity

Severity

Medium

Family

Family

Databases

CVSSv2 Base

CVSSv2 Base

4.6

CVSSv2 Vector

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Solution Type

Solution Type

Vendor Patch

Created

Created

13 years ago

Modified

Modified

4 years ago

Share

Summary

The host is installed with IBM DB2 and is prone to multiple vulnerabilities.

Insight

Insight

Multiple flaws are due to: - Unspecified error exists related to a table function when the definer loses required privileges. - Unspecified error that can be exploited to insert, update, or delete rows in a table without having required privileges. - Unspecified error in the handling of 'SET SESSION AUTHORIZATION' statements. - Error in 'DASAUTO' command, it can be run by non-privileged users.

Affected Software

Affected Software

IBM DB2 version 8 prior to Fixpak 18 IBM DB2 version 9.1 prior to Fixpak 8 IBM DB2 version 9.5 prior to Fixpak 4 IBM DB2 version 9.7 prior to Fixpak 1

Solution

Solution

Update DB2 8 Fixpak 18 or 9.1 Fixpak 8 or 9.5 Fixpak 4 or 9.7 Fixpak 1 or later.

Common Vulnerabilities and Exposures (CVE)

References