Lucene search
HistoryOct 03, 2022 - 4:24 p.m.
CVE-2009-4150
ibm db2
vulnerability
execution
privileged access
6.3 Medium
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
21.6%
dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors.
Affected configurations
Node
ibmdb2Match9.1fp1
ORibmdb2Match9.1fp2
ORibmdb2Match9.1fp3
ORibmdb2Match9.1fp3a
ORibmdb2Match9.1fp4
ORibmdb2Match9.1fp5
ORibmdb2Match9.1fp6
ORibmdb2Match9.1fp6a
ORibmdb2Match9.1fp7
ORibmdb2Match9.5fp1
ORibmdb2Match9.5fp2
ORibmdb2Match9.5fp2a
ORibmdb2Match9.5fp3
ORibmdb2Match9.5fp3a
ORibmdb2Match9.5fp3b
ORibmdb2Match9.7
ORibmdb2_universal_databaseMatch8
ORibmdb2_universal_databaseMatch8fp1aix
ORibmdb2_universal_databaseMatch8fp1hp_ux
ORibmdb2_universal_databaseMatch8fp1linux
ORibmdb2_universal_databaseMatch8fp10aix
ORibmdb2_universal_databaseMatch8fp10hp_ux
ORibmdb2_universal_databaseMatch8fp10linux
ORibmdb2_universal_databaseMatch8fp10solaris
ORibmdb2_universal_databaseMatch8fp11aix
ORibmdb2_universal_databaseMatch8fp11hp_ux
ORibmdb2_universal_databaseMatch8fp11linux
ORibmdb2_universal_databaseMatch8fp11solaris
ORibmdb2_universal_databaseMatch8fp12aix
ORibmdb2_universal_databaseMatch8fp12hp_ux
ORibmdb2_universal_databaseMatch8fp12linux
ORibmdb2_universal_databaseMatch8fp12solaris
ORibmdb2_universal_databaseMatch8fp13aix
ORibmdb2_universal_databaseMatch8fp13hp_ux
ORibmdb2_universal_databaseMatch8fp13linux
ORibmdb2_universal_databaseMatch8fp13solaris
ORibmdb2_universal_databaseMatch8fp14aix
ORibmdb2_universal_databaseMatch8fp14hp_ux
ORibmdb2_universal_databaseMatch8fp14linux
ORibmdb2_universal_databaseMatch8fp14solaris
ORibmdb2_universal_databaseMatch8fp15aix
ORibmdb2_universal_databaseMatch8fp15hp_ux
ORibmdb2_universal_databaseMatch8fp15linux
ORibmdb2_universal_databaseMatch8fp15solaris
ORibmdb2_universal_databaseMatch8fp16aix
ORibmdb2_universal_databaseMatch8fp16hp_ux
ORibmdb2_universal_databaseMatch8fp16linux
ORibmdb2_universal_databaseMatch8fp16solaris
ORibmdb2_universal_databaseMatch8fp2aix
ORibmdb2_universal_databaseMatch8fp2hp_ux
ORibmdb2_universal_databaseMatch8fp2linux
ORibmdb2_universal_databaseMatch8fp2solaris
ORibmdb2_universal_databaseMatch8fp3aix
ORibmdb2_universal_databaseMatch8fp3hp_ux
ORibmdb2_universal_databaseMatch8fp3linux
ORibmdb2_universal_databaseMatch8fp3solaris
ORibmdb2_universal_databaseMatch8fp4aix
ORibmdb2_universal_databaseMatch8fp4hp_ux
ORibmdb2_universal_databaseMatch8fp4linux
ORibmdb2_universal_databaseMatch8fp4solaris
ORibmdb2_universal_databaseMatch8fp4aaix
ORibmdb2_universal_databaseMatch8fp4ahp_ux
ORibmdb2_universal_databaseMatch8fp4alinux
ORibmdb2_universal_databaseMatch8fp4asolaris
ORibmdb2_universal_databaseMatch8fp5aix
ORibmdb2_universal_databaseMatch8fp5hp_ux
ORibmdb2_universal_databaseMatch8fp5linux
ORibmdb2_universal_databaseMatch8fp5solaris
ORibmdb2_universal_databaseMatch8fp6aix
ORibmdb2_universal_databaseMatch8fp6hp_ux
ORibmdb2_universal_databaseMatch8fp6linux
ORibmdb2_universal_databaseMatch8fp6solaris
ORibmdb2_universal_databaseMatch8fp6aaix
ORibmdb2_universal_databaseMatch8fp6ahp_ux
ORibmdb2_universal_databaseMatch8fp6alinux
ORibmdb2_universal_databaseMatch8fp6asolaris
ORibmdb2_universal_databaseMatch8fp6baix
ORibmdb2_universal_databaseMatch8fp6bhp_ux
ORibmdb2_universal_databaseMatch8fp6blinux
ORibmdb2_universal_databaseMatch8fp6bsolaris
ORibmdb2_universal_databaseMatch8fp6caix
ORibmdb2_universal_databaseMatch8fp6chp_ux
ORibmdb2_universal_databaseMatch8fp6clinux
ORibmdb2_universal_databaseMatch8fp6csolaris
ORibmdb2_universal_databaseMatch8fp7aix
ORibmdb2_universal_databaseMatch8fp7hp_ux
ORibmdb2_universal_databaseMatch8fp7linux
ORibmdb2_universal_databaseMatch8fp7solaris
ORibmdb2_universal_databaseMatch8fp7aaix
ORibmdb2_universal_databaseMatch8fp7ahp_ux
ORibmdb2_universal_databaseMatch8fp7alinux
ORibmdb2_universal_databaseMatch8fp7asolaris
ORibmdb2_universal_databaseMatch8fp7baix
ORibmdb2_universal_databaseMatch8fp7bhp_ux
ORibmdb2_universal_databaseMatch8fp7blinux
ORibmdb2_universal_databaseMatch8fp7bsolaris
ORibmdb2_universal_databaseMatch8fp8aix
ORibmdb2_universal_databaseMatch8fp8hp_ux
ORibmdb2_universal_databaseMatch8fp8linux
ORibmdb2_universal_databaseMatch8fp8solaris
ORibmdb2_universal_databaseMatch8fp8aaix
ORibmdb2_universal_databaseMatch8fp8ahp_ux
ORibmdb2_universal_databaseMatch8fp8alinux
ORibmdb2_universal_databaseMatch8fp8asolaris
ORibmdb2_universal_databaseMatch8fp9aix
ORibmdb2_universal_databaseMatch8fp9hp_ux
ORibmdb2_universal_databaseMatch8fp9linux
ORibmdb2_universal_databaseMatch8fp9solaris
ORibmdb2_universal_databaseMatch8fp9aaix
ORibmdb2_universal_databaseMatch8fp9ahp_ux
ORibmdb2_universal_databaseMatch8fp9alinux
ORibmdb2_universal_databaseMatch8fp9asolaris
References
secunia.com/advisories/36890
secunia.com/advisories/37454
securitytracker.com/id?1023242
www-01.ibm.com/support/docview.wss?uid=swg1IC64759
www-01.ibm.com/support/docview.wss?uid=swg1IZ40340
www-01.ibm.com/support/docview.wss?uid=swg1IZ40343
www-01.ibm.com/support/docview.wss?uid=swg1IZ40352
www-01.ibm.com/support/docview.wss?uid=swg21386689
www-01.ibm.com/support/docview.wss?uid=swg21403619
www.vupen.com/english/advisories/2009/3340
Related
openvas
openvas
IBM Db2 Multiple Vulnerabilities (Dec 2009) - Linux
2009-12-05 00:00:00
IBM DB2 Multiple Vulnerabilities - Dec09 (Linux)
2009-12-05 00:00:00
nvd
nvd
CVE-2009-4150
2009-12-02 11:30:00
cvelist
cvelist
CVE-2009-4150
2022-10-03 16:24:04
prion
prion
Code injection
2009-12-02 11:30:00
6.3 Medium
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
21.6%
Related for CVE-2009-4150