CVE-2010-3194
Summary
| CVE | CVE-2010-3194 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2010-08-31 22:00:02 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | The DB2DART program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows attackers to bypass intended file access restrictions via unspecified vectors related to overwriting files owned by an instance owner. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:L/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ibm | Db2 | 9.1 | All | All | All |
| Application | Ibm | Db2 | 9.1 | fp1 | All | All |
| Application | Ibm | Db2 | 9.1 | fp2 | All | All |
| Application | Ibm | Db2 | 9.1 | fp2a | All | All |
| Application | Ibm | Db2 | 9.1 | fp3 | All | All |
| Application | Ibm | Db2 | 9.1 | fp3a | All | All |
| Application | Ibm | Db2 | 9.1 | fp4 | All | All |
| Application | Ibm | Db2 | 9.1 | fp4a | All | All |
| Application | Ibm | Db2 | 9.1 | fp5 | All | All |
| Application | Ibm | Db2 | 9.1 | fp6 | All | All |
| Application | Ibm | Db2 | 9.1 | fp6a | All | All |
| Application | Ibm | Db2 | 9.1 | fp7 | All | All |
| Application | Ibm | Db2 | 9.1 | fp7a | All | All |
| Application | Ibm | Db2 | 9.1 | fp8 | All | All |
| Application | Ibm | Db2 | 9.5 | All | All | All |
| Application | Ibm | Db2 | 9.5 | fp1 | All | All |
| Application | Ibm | Db2 | 9.5 | fp2 | All | All |
| Application | Ibm | Db2 | 9.5 | fp2a | All | All |
| Application | Ibm | Db2 | 9.5 | fp3 | All | All |
| Application | Ibm | Db2 | 9.5 | fp3a | All | All |
| Application | Ibm | Db2 | 9.5 | fp3b | All | All |
| Application | Ibm | Db2 | 9.5 | fp4 | All | All |
| Application | Ibm | Db2 | 9.5 | fp4a | All | All |
| Application | Ibm | Db2 | 9.5 | fp5 | All | All |
| Application | Ibm | Db2 | 9.7 | All | All | All |
| Application | Ibm | Db2 | 9.7 | fp1 | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT | af854a3a-2127-422b-91ae-364da2661108 | public.dhe.ibm.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | Vendor Advisory |
| IBM - Security Vulnerabilities and HIPER APARs fixed in DB2 for Linux, UNIX, and Windows Version 9.1 Fix Pack 9 | af854a3a-2127-422b-91ae-364da2661108 | www-01.ibm.com | Vendor Advisory |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| IBM IC65749: Security: DB2DART PROGRAM COULD OVERWRITE FILES OWNED BY THE INSTANCE OWNER. - United States | af854a3a-2127-422b-91ae-364da2661108 | www-01.ibm.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| IBM IC65756: Security: DB2DART PROGRAM COULD OVERWRITE FILES OWNED BY THE INSTANCE OWNER. - United States | af854a3a-2127-422b-91ae-364da2661108 | www-01.ibm.com | Vendor Advisory |
| IBM IC65762: Security: DB2DART PROGRAM COULD OVERWRITE FILES OWNED BY THE INSTANCE OWNER. - United States | af854a3a-2127-422b-91ae-364da2661108 | www-01.ibm.com | Vendor Advisory |
| IBM DB2 Multiple Vulnerabilities - Advisories - Community | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| IBM - Security Vulnerabilities and HIPER APARs fixed in DB2 for Linux, UNIX, and Windows Version 9.7 Fix Pack 2 | af854a3a-2127-422b-91ae-364da2661108 | www-01.ibm.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.