PT-2007-2649 · Ibm · Ibm Db2 Udb

Publicado 2007-03-02 · Atualizado 2009-02-11 · CVE-2007-1228

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Média

Vetor base

AV:L/AC:M/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM DB2 UDB versions 8.2 before Fixpak 7 and 9 before Fix Pack 2

Description The issue allows the "fenced" user to access certain unauthorized directories on UNIX systems.

Recommendations For IBM DB2 UDB version 8.2, apply Fixpak 7 to resolve the issue. For IBM DB2 UDB version 9, apply Fix Pack 2 to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2007-1228

Produtos afetados

Ibm Db2 Udb

Referências · 6

• http://securitytracker.com/id?1017731 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=swg1IY86711 · Aviso do Fabricante
• http://www-1.ibm.com/support/docview.wss?uid=swg1IY87492 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-1228 · Nota de Segurança
• http://secunia.com/advisories/24387 · Aviso do Fabricante
• http://securityfocus.com/bid/22729 · Nota