PT-2007-2649 · Ibm · Ibm Db2 Udb

Published 2007-03-02 · Updated 2009-02-11 · CVE-2007-1228

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Medium

Base vector

AV:L/AC:M/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM DB2 UDB versions 8.2 before Fixpak 7 and 9 before Fix Pack 2

Description The issue allows the "fenced" user to access certain unauthorized directories on UNIX systems.

Recommendations For IBM DB2 UDB version 8.2, apply Fixpak 7 to resolve the issue. For IBM DB2 UDB version 9, apply Fix Pack 2 to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2007-1228

Affected Products

Ibm Db2 Udb

References · 6

• http://www-1.ibm.com/support/docview.wss?uid=swg1IY86711 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1IY87492 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1228 · Security Note
• http://secunia.com/advisories/24387 · Vendor Advisory
• http://securitytracker.com/id?1017731 · Note
• http://securityfocus.com/bid/22729 · Note