IBM DB2 prior to 9.7 Fix Pack 3 Multiple Security Vulnerabilities
BID:43291
Info
IBM DB2 prior to 9.7 Fix Pack 3 Multiple Security Vulnerabilities
| Bugtraq ID: | 43291 |
| Class: | Access Validation Error |
| CVE: |
CVE-2010-3474 CVE-2010-3475 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Sep 17 2010 12:00AM |
| Updated: | Apr 13 2015 09:05PM |
| Credit: | The vendor disclosed these issues. |
| Vulnerable: |
IBM DB2 9.7 fixpack 2 IBM DB2 9.7 |
| Not Vulnerable: |
IBM DB2 9.7 fixpack 3 |
Discussion
IBM DB2 prior to 9.7 Fix Pack 3 Multiple Security Vulnerabilities
IBM DB2 is prone to multiple remote vulnerabilities.
Successful exploits of these issues will allow attackers to bypass certain restriction, perform unauthorized actions, and gain elevated privileges in the database.
An attacker may need a valid user account to carry out this attack.
IBM DB2 9.7 Fix Pack 2 and prior versions are affected.
IBM DB2 is prone to multiple remote vulnerabilities.
Successful exploits of these issues will allow attackers to bypass certain restriction, perform unauthorized actions, and gain elevated privileges in the database.
An attacker may need a valid user account to carry out this attack.
IBM DB2 9.7 Fix Pack 2 and prior versions are affected.
Exploit / POC
IBM DB2 prior to 9.7 Fix Pack 3 Multiple Security Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
IBM DB2 prior to 9.7 Fix Pack 3 Multiple Security Vulnerabilities
Solution:
The vendor has released fixes. Please see the references for details.
Solution:
The vendor has released fixes. Please see the references for details.
References
IBM DB2 prior to 9.7 Fix Pack 3 Multiple Security Vulnerabilities
References:
References: