CVEvulnerability
CVE-2010-3194
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-08-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The DB2DART program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows attackers to bypass intended file access restrictions via unspecified vectors related to overwriting files owned by an instance owner.
Affected configurations
• ibm db2 9.1
• ibm db2 9.5
• ibm db2 9.7
Related
Weakness · not in database (1)
References
- ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT public.dhe.ibm.com
- http://secunia.com/advisories/41218 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC65749 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC65756 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC65762 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21426108 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21432298 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/2225 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61445 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13841 oval.cisecurity.org
- ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT public.dhe.ibm.com
- http://secunia.com/advisories/41218 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC65749 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC65756 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC65762 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21426108 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21432298 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/2225 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61445 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13841 oval.cisecurity.org