IBM DB2 prior to 9.5 Fix Pack 6a Multiple Security Vulnerabilities
BID:43834
Info
IBM DB2 prior to 9.5 Fix Pack 6a Multiple Security Vulnerabilities
| Bugtraq ID: | 43834 |
| Class: | Unknown |
| CVE: |
CVE-2010-3732 CVE-2010-3733 CVE-2010-3734 CVE-2010-3735 CVE-2010-3736 CVE-2010-3737 CVE-2010-3738 CVE-2010-3739 CVE-2010-3740 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Oct 07 2010 12:00AM |
| Updated: | Oct 13 2010 02:59PM |
| Credit: | IBM |
| Vulnerable: |
IBM DB2 Universal Database for Windows 9.5 Fixpak 2 IBM DB2 Universal Database for Windows 9.5 Fix Pak 1 IBM DB2 Universal Database for Windows 9.5 IBM DB2 Universal Database for Solaris 9.5 Fixpak 2 IBM DB2 Universal Database for Solaris 9.5 FixPak 1 IBM DB2 Universal Database for Solaris 9.5 IBM DB2 Universal Database for Linux 9.5 Fixpak 2 IBM DB2 Universal Database for Linux 9.5 FixPak 1 IBM DB2 Universal Database for Linux 9.5 IBM DB2 Universal Database for HP-UX 9.5 Fixpak 2 IBM DB2 Universal Database for HP-UX 9.5 FixPak 1 IBM DB2 Universal Database for HP-UX 9.5 IBM DB2 Universal Database for AIX 9.5 Fixpak 2 IBM DB2 Universal Database for AIX 9.5 FixPak 1 IBM DB2 Universal Database for AIX 9.5 |
| Not Vulnerable: |
IBM Universal Database 9.5 Fixpak 6a |
Discussion
IBM DB2 prior to 9.5 Fix Pack 6a Multiple Security Vulnerabilities
IBM DB2 is prone to multiple vulnerabilities, including:
A local privilege-escalation vulnerability
An authentication-bypass vulnerability
Multiple denial-of-service vulnerabilities
Multiple security-bypass vulnerabilities
An attacker can exploit these issues to bypass certain security restrictions, gain elevated privileges on the affected computer, obtain sensitive information, or cause a denial-of-service condition. Other attacks are also possible.
These issues affect IBM DB2 9.5 prior to Fix Pack 6a.
IBM DB2 is prone to multiple vulnerabilities, including:
A local privilege-escalation vulnerability
An authentication-bypass vulnerability
Multiple denial-of-service vulnerabilities
Multiple security-bypass vulnerabilities
An attacker can exploit these issues to bypass certain security restrictions, gain elevated privileges on the affected computer, obtain sensitive information, or cause a denial-of-service condition. Other attacks are also possible.
These issues affect IBM DB2 9.5 prior to Fix Pack 6a.
Exploit / POC
IBM DB2 prior to 9.5 Fix Pack 6a Multiple Security Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may not require an exploit code.
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may not require an exploit code.
Solution / Fix
IBM DB2 prior to 9.5 Fix Pack 6a Multiple Security Vulnerabilities
Solution:
The vendor has released fixes. Please see the references for details.
Solution:
The vendor has released fixes. Please see the references for details.
References
IBM DB2 prior to 9.5 Fix Pack 6a Multiple Security Vulnerabilities
References:
References: