IBM DB2 9.5 < Fix Pack 5 Multiple Vulnerabilities

medium Nessus Network Monitor Plugin ID 5262

Synopsis

The remote IBM database server is affected by multiple vulnerabilities.

Description

According to its version, the installation of IBM DB2 9.5 is earlier than Fix Pack 5. Such versions are potentially affected by multiple unspecified vulnerabilities.

Solution

Upgrade to IBM DB2 9.5 Fix Pack 5 or higher.

See Also

http://www-01.ibm.com/support/docview.wss?rs=71&uid=swg21293566

http://www-01.ibm.com/support/docview.wss?rs=71&uid=swg21412902

http://www-01.ibm.com/support/docview.wss?uid=swg21412902

Plugin Details

Severity: Medium

ID: 5262

Family: Database

Published: 12/15/2009

Updated: 3/6/2019

Nessus ID: 43172

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Medium

Base Score: 5.8

Temporal Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS v3

Risk Factor: Medium

Base Score: 6.5

Temporal Score: 5.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:ibm:db2

Patch Publication Date: 12/14/2009

Vulnerability Publication Date: 12/14/2009

Reference Information

CVE: CVE-2009-4325, CVE-2009-4326, CVE-2009-4327, CVE-2009-4328, CVE-2009-4329, CVE-2009-4330, CVE-2009-4331, CVE-2009-4332, CVE-2009-4333, CVE-2009-4334, CVE-2009-4335, CVE-2009-4438, CVE-2009-4439

BID: 37332