PT-2007-5598 · Ibm · Ibm Db2 Udb

Published 2007-08-18 · Updated 2017-07-29 · CVE-2007-4417

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM DB2 UDB versions 8 before Fixpak 15 IBM DB2 UDB versions 9.1 before Fixpak 3

Description The issue allows remote authenticated users to execute a method after revocation until the routine auth cache is flushed, due to improper revocation of privileges on methods.

Recommendations For IBM DB2 UDB version 8, apply Fixpak 15 to resolve the issue. For IBM DB2 UDB version 9.1, apply Fixpak 3 to resolve the issue.

Fix

Related Identifiers

CVE-2007-4417

Affected Products

Ibm Db2 Udb

References · 10

• http://secunia.com/advisories/26471 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1IY88158 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1IY88226 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-4417 · Security Note
• http://attrition.org/pipermail/vim/2007-August/001765.html · Note
• http://www-1.ibm.com/support/docview.wss?uid=swg21255607 · Note
• http://securityfocus.com/bid/25339 · Note
• http://www-1.ibm.com/support/docview.wss?uid=swg21255352 · Note
• http://vupen.com/english/advisories/2007/2912 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36108 · Note