Test Kennung:	1.3.6.1.4.1.25623.1.0.901075
Kategorie:	Databases
Titel:	IBM Db2 Multiple Unspecified Vulnerabilities (Linux)
Zusammenfassung:	IBM Db2 is prone to multiple vulnerabilities.
Beschreibung:	Summary: IBM Db2 is prone to multiple vulnerabilities. Vulnerability Insight: The flaws are due to: - An unspecified error in RAND scalar function in the common code infrastructure component when the Database Partitioning Feature (DPF) is used. - An error in common code infrastructure component does not properly validate the size of a memory pool during a creation attempt, which allows attackers to cause a denial of service via unspecified vectors. - An error in install component when configures the High Availability (HA) scripts with incorrect file-permission and authorization settings. Vulnerability Impact: Successful exploitation will allow attacker to bypass security restrictions, cause a denial of service and some are having unknown impact. Affected Software/OS: IBM Db2 version 9.5 prior to FP 5 and 9.7 prior to FP 1. Solution: Update IBM Db2 9.5 FP 5, 9.7 FP 1 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	BugTraq ID: 37332 Common Vulnerability Exposure (CVE) ID: CVE-2009-4326 AIX APAR: IC63946 http://www-01.ibm.com/support/docview.wss?uid=swg1IC63946 AIX APAR: IZ44872 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44872 http://www.securityfocus.com/bid/37332 http://secunia.com/advisories/37759 http://www.vupen.com/english/advisories/2009/3520 Common Vulnerability Exposure (CVE) ID: CVE-2009-4327 AIX APAR: IC63179 http://www-01.ibm.com/support/docview.wss?uid=swg1IC63179 AIX APAR: IZ43772 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ43772 Common Vulnerability Exposure (CVE) ID: CVE-2009-4331 AIX APAR: IC63581 http://www-01.ibm.com/support/docview.wss?uid=swg1IC63581 AIX APAR: IC63959 http://www-01.ibm.com/support/docview.wss?uid=swg1IC63959
Copyright	Copyright (C) 2009 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.