dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:09
Type | Values Removed | Values Added |
---|---|---|
References | () http://secunia.com/advisories/36890 - Vendor Advisory | |
References | () http://secunia.com/advisories/37454 - Vendor Advisory | |
References | () http://securitytracker.com/id?1023242 - | |
References | () http://www-01.ibm.com/support/docview.wss?uid=swg1IC64759 - | |
References | () http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40340 - | |
References | () http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40343 - | |
References | () http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40352 - | |
References | () http://www-01.ibm.com/support/docview.wss?uid=swg21386689 - Patch, Vendor Advisory | |
References | () http://www-01.ibm.com/support/docview.wss?uid=swg21403619 - Patch, Vendor Advisory | |
References | () http://www.vupen.com/english/advisories/2009/3340 - Vendor Advisory |
Information
Published : 2009-12-02 11:30
Updated : 2024-11-21 01:09
NVD link : CVE-2009-4150
Mitre link : CVE-2009-4150
CVE.ORG link : CVE-2009-4150
JSON object : View
Products Affected
ibm
- db2
- db2_universal_database
CWE
CWE-264
Permissions, Privileges, and Access Controls