Detections
Analytics
IBM DB2 9.5 < 9.5 Fix Pack 7 Multiple Vulnerabilities
critical Nessus Network Monitor Plugin ID 5750
Synopsis
The remote IBM DB2 database server is affected by multiple vulnerabilities.Description
Versions of IBM DB2 9.5 earlier than Fix Pack 7 are potentially affected by multiple vulnerabilities :- A buffer overflow vulnerability exists in the DB2 Administrative Service (DAS). (IC72028)
- It is possible to update statistics for tables without appropriate privileges. (IC71413)
- It is possible for a user to execute a non-DDL statement after role memebership has been revoked from its group. (IC71263)
Solution
Upgrade to IBM DB2 9.5 Fix Pack 7 or higher.See Also
https://www-304.ibm.com/support/docview.wss?uid=swg21457455
https://www-304.ibm.com/support/docview.wss?uid=swg1IC71413
Plugin Details
Severity: Critical
ID: 5750
Family: Database
Published: 2/1/2011
Updated: 3/6/2019
Nessus ID: 51841
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:ibm:db2
Patch Publication Date: 1/31/2011
Vulnerability Publication Date: 1/28/2011