PT-2005-5403 · Ibm · Ibm Db2 Universal Database

Published 2005-12-31 · Updated 2008-09-05 · CVE-2005-4738

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM DB2 Universal Database (UDB) version 8.10 before ESE AIX 5765F4100

Description The issue allows remote authenticated users to gain privileges by permitting object creation based on routines without ensuring the user has execute privileges.

Recommendations For version 8.10 before ESE AIX 5765F4100, update to a version that includes the ESE AIX 5765F4100 fix to ensure proper privilege checks are in place.

Fix

Related Identifiers

CVE-2005-4738

Affected Products

Ibm Db2 Universal Database

References · 4

• http://secunia.com/advisories/17031 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4738 · Security Note
• http://securityfocus.com/bid/15126 · Patch
• http://www-1.ibm.com/support/docview.wss?uid=swg1IY71865 · Patch, Vendor Advisory