CVE-2005-4738

Опубликовано: 31 дек. 2005

Источник: nvd

CVSS2: 6.5

EPSS Низкий

Описание

IBM DB2 Universal Database (UDB) 810 before ESE AIX 5765F4100 does not ensure that a user has execute privileges before permitting object creation based on routines, which allows remote authenticated users to gain privileges.

Ссылки

http://secunia.com/advisories/17031
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IY71865
Patch
http://www.securityfocus.com/bid/15126
Patch
http://secunia.com/advisories/17031
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IY71865
Patch
http://www.securityfocus.com/bid/15126
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8.1.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8.1.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8.1.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8.1.6c:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8.1.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8.1.7b:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8.1.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8.1.8a:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8.1.9:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8.1.9a:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.00546

Низкий

6.5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-984p-q7w5-xvvg

github

почти 4 года назад