PT-2005-5403 · Ibm · Ibm Db2 Universal Database

Publicado 2005-12-31 · Atualizado 2008-09-05 · CVE-2005-4738

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM DB2 Universal Database (UDB) version 8.10 before ESE AIX 5765F4100

Description The issue allows remote authenticated users to gain privileges by permitting object creation based on routines without ensuring the user has execute privileges.

Recommendations For version 8.10 before ESE AIX 5765F4100, update to a version that includes the ESE AIX 5765F4100 fix to ensure proper privilege checks are in place.

Correção

Identificadores relacionados

CVE-2005-4738

Produtos afetados

Ibm Db2 Universal Database

Referências · 4

• http://secunia.com/advisories/17031 · Aviso do Fabricante
• http://www-1.ibm.com/support/docview.wss?uid=swg1IY71865 · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-4738 · Nota de Segurança
• http://securityfocus.com/bid/15126 · Correção