Lucene search

PRIOn knowledge basePRION:CVE-2009-4331

HistoryDec 16, 2009 - 6:30 p.m.

Authorization

2009-12-1618:30:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.1%

JSON

The Install component in IBM DB2 9.5 before FP5 and 9.7 before FP1 configures the High Availability (HA) scripts with incorrect file-permission and authorization settings, which has unknown impact and local attack vectors.

CPENameOperatorVersion
db2eq9.5
db2eq9.5 fp1
db2eq9.5 fp2a
db2eq9.5 fp3b
db2eq9.5 fp2
db2eq9.7
db2eq9.5 fp3
db2eq9.5 fp3a

Name	Operator	Version
db2	eq	9.5
db2	eq	9.5 fp1
db2	eq	9.5 fp2a
db2	eq	9.5 fp3b
db2	eq	9.5 fp2
db2	eq	9.7
db2	eq	9.5 fp3
db2	eq	9.5 fp3a

References

ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT

ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT

ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT

secunia.com/advisories/37759

www-01.ibm.com/support/docview.wss?uid=swg1IC63581

www-01.ibm.com/support/docview.wss?uid=swg1IC63959

www-01.ibm.com/support/docview.wss?uid=swg21293566

www-01.ibm.com/support/docview.wss?uid=swg21412902

www.securityfocus.com/bid/37332

www.vupen.com/english/advisories/2009/3520