PT-2008-2316 · Ibm · Ibm Db2 Udb

Published 2008-02-12 · Updated 2011-03-08 · CVE-2008-0696

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM DB2 UDB versions prior to 8.2 Fixpak 16

Description The issue concerns improper authorization checking for the ALTER TABLE statement, but the specific impact and attack vectors are not detailed.

Recommendations For versions prior to 8.2 Fixpak 16, update to at least 8.2 Fixpak 16 to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-0696

Affected Products

Ibm Db2 Udb

References · 5

• http://secunia.com/advisories/28771 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0696 · Security Note
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ07337 · Vendor Advisory
• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT · Note
• http://vupen.com/english/advisories/2008/0401 · Note