PT-2009-5217 · Ibm · Ibm Db2

Published 2009-08-19 · Updated 2009-08-20 · CVE-2009-2859

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM DB2 version 8.1 before FP18

Description The issue allows attackers to obtain unspecified access via a das command.

Recommendations For IBM DB2 version 8.1, apply FP18 to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-2859

Affected Products

Ibm Db2

References · 6

• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ34149 · Vendor Advisory
• http://vupen.com/english/advisories/2009/2293 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2859 · Security Note
• http://secunia.com/advisories/36313 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg24024075 · Vendor Advisory
• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT · Note