PT-2005-3015 · Ibm · Ibm Db2

Published 2005-06-29 · Updated 2008-09-05 · CVE-2005-2073

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: IBM DB2 versions 8.1.4 through 8.1.9 IBM DB2 versions 8.2.0 through 8.2.2

Description: A local user with SELECT privileges can conduct unauthorized activities, including inserting, updating, or deleting table contents.

Recommendations: For IBM DB2 versions 8.1.4 through 8.1.9, update to a version outside of this range to resolve the issue. For IBM DB2 versions 8.2.0 through 8.2.2, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting SELECT privileges to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-2073

Affected Products

Ibm Db2

References · 2

• http://www-1.ibm.com/support/search.wss?rs=0&q=IY73104&apar=only · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2073 · Security Note