CVE-2009-4150

Опубликовано: 02 дек. 2009

Источник: nvd

CVSS2: 4.6

EPSS Низкий

Описание

dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors.

Ссылки

http://secunia.com/advisories/36890
Vendor Advisory
http://secunia.com/advisories/37454
Vendor Advisory
http://securitytracker.com/id?1023242
http://www-01.ibm.com/support/docview.wss?uid=swg1IC64759
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40340
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40343
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40352
http://www-01.ibm.com/support/docview.wss?uid=swg21386689
Patch
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21403619
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2009/3340
Vendor Advisory
http://secunia.com/advisories/36890
Vendor Advisory
http://secunia.com/advisories/37454
Vendor Advisory
http://securitytracker.com/id?1023242
http://www-01.ibm.com/support/docview.wss?uid=swg1IC64759
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40340
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40343
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40352
http://www-01.ibm.com/support/docview.wss?uid=swg21386689
Patch
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21403619
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2009/3340
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:9.1:fp6a:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:9.1:fp7:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp1:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp1:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp1:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp10:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp10:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp10:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp10:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp11:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp11:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp11:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp11:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp12:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp12:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp12:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp12:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp13:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp13:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp13:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp13:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp14:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp14:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp14:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp14:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp15:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp15:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp15:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp15:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp16:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp16:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp16:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp16:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp2:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp2:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp2:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp2:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp3:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp3:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp3:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp3:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp4:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp4:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp4:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp4:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp4a:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp4a:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp4a:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp4a:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp5:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp5:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp5:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp5:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp6:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp6:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp6:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp6:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp6a:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp6a:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp6a:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp6a:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp6b:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp6b:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp6b:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp6b:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp6c:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp6c:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp6c:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp6c:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp7:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp7:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp7:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp7:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp7a:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp7a:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp7a:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp7a:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp7b:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp7b:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp7b:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp7b:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp8:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp8:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp8:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp8:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp8a:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp8a:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp8a:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp8a:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp9:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp9:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp9:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp9:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp9a:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp9a:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp9a:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:8:fp9a:solaris:*:*:*:*:*

EPSS

Процентиль: 37%

0.00436

Низкий

4.6 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-g53c-pmxx-v6h7

github

больше 4 лет назад