CVEvulnerability
CVE-2009-4333
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-12-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-200
Description
The Relational Data Services component in IBM DB2 9.5 before FP5 allows attackers to obtain the password argument from the SET ENCRYPTION PASSWORD statement via vectors involving the GET SNAPSHOT FOR DYNAMIC SQL command.
Affected configurations
• ibm db2 9.5
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT ftp.software.ibm.com
- http://secunia.com/advisories/37759 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IZ38819 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21293566 Patch
- http://www-01.ibm.com/support/docview.wss?uid=swg21412902 Vendor Advisory
- http://www.securityfocus.com/bid/37332 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/3520 Vendor Advisory
- ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT ftp.software.ibm.com
- http://secunia.com/advisories/37759 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IZ38819 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21293566 Patch
- http://www-01.ibm.com/support/docview.wss?uid=swg21412902 Vendor Advisory
- http://www.securityfocus.com/bid/37332 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/3520 Vendor Advisory