PT-2009-6458 · Ibm · Ibm Db2

Published 2009-12-16 · Updated 2017-08-17 · CVE-2009-4335

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM DB2 versions prior to 9.5 FP5

Description The issue concerns unspecified vulnerabilities in the Spatial Extender component of IBM DB2, related to remote exploits. These vulnerabilities have unknown impact and can be attacked remotely.

Recommendations For versions prior to 9.5 FP5, update to a version that includes FP5 or later to resolve the issue.

Fix

Related Identifiers

CVE-2009-4335

Affected Products

Ibm Db2

References · 9

• http://vupen.com/english/advisories/2009/3520 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21412902 · Vendor Advisory
• http://secunia.com/advisories/37759 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21293566 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4335 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC62625 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55007 · Note
• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT · Note
• http://securityfocus.com/bid/37332 · Note