PT-2008-2316 · Ibm · Ibm Db2 Udb

Publicado 2008-02-12 · Atualizado 2011-03-08 · CVE-2008-0696

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM DB2 UDB versions prior to 8.2 Fixpak 16

Description The issue concerns improper authorization checking for the ALTER TABLE statement, but the specific impact and attack vectors are not detailed.

Recommendations For versions prior to 8.2 Fixpak 16, update to at least 8.2 Fixpak 16 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-0696

Produtos afetados

Ibm Db2 Udb

Referências · 5

• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT · Nota
• http://secunia.com/advisories/28771 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-0696 · Nota de Segurança
• http://vupen.com/english/advisories/2008/0401 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ07337 · Aviso do Fabricante