Lucene search
HistoryNov 20, 2007 - 8:46 p.m.
CVE-2007-6051
ibm
db2
udb
fixpak
privileges
groups
security issue
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.3 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.7%
IBM DB2 UDB 9.1 before Fixpak 4 assigns incorrect privileges to the (1) DB2ADMNS and (2) DB2USERS alternative groups, which has unknown impact. NOTE: the vendor description of this issue is too vague to be certain that it is security-related.
Affected configurations
Node
linuxlinux_kernel
ORmicrosoftwindows
ORunixunix
ibmdb2_universal_databaseRange≤9.1fp3a
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm:db2_universal_database | ibm db2 universal database | le | 9.1 |
Related
prion
prion
Design/Logic Flaw
2007-11-20 20:46:00
cvelist
cvelist
CVE-2007-6051
2007-11-20 20:00:00
nvd
nvd
CVE-2007-6051
2007-11-20 20:46:00
nessus
nessus
IBM DB2 < 9 Fix Pack 4 Multiple Vulnerabilities
2007-11-16 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.3 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.7%
Related for CVE-2007-6051