IBM DB2 DBADM Privilege Revocation Security Bypass Vulnerability

Bugtraq ID:	46064
Class:	Unknown
CVE:	CVE-2011-0757
Remote:	Yes
Local:	No
Published:	Jan 31 2011 12:00AM
Updated:	Mar 19 2015 07:35AM
Credit:	IBM
Vulnerable:
Not Vulnerable:

IBM DB2 DBADM Privilege Revocation Security Bypass Vulnerability

IBM DB2 is prone to a security-bypass vulnerability.

Successful exploits can allow attackers to bypass certain security restrictions and perform unauthorized actions.

The following versions of DB2 are vulnerable:

DB2 9.1 prior to Fix Pack 10
DB2 9.5 prior to Fix Pack 6a
DB2 9.7 prior to Fix Pack 2

IBM DB2 DBADM Privilege Revocation Security Bypass Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM DB2 DBADM Privilege Revocation Security Bypass Vulnerability

Solution:
Updates are available; please see the references for more information.

IBM DB2 DBADM Privilege Revocation Security Bypass Vulnerability

References:

• IBM DB2 Homepage (IBM)
  
• Security Vulnerabilities and HIPER APARs fixed in DB2 for Linux, UNIX, and Windo (IBM)