CVEvulnerability
CVE-2010-3475
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-09-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
IBM DB2 9.7 before FP3 does not properly enforce privilege requirements for execution of entries in the dynamic SQL cache, which allows remote authenticated users to bypass intended access restrictions by leveraging the cache to execute an UPDATE statement contained in a compiled compound SQL statement.
Affected configurations
• ibm db2 9.7
• ibm db2 9.7.0.1
• ibm db2 9.7.0.2
Related
Weakness · not in database (1)
References
- http://osvdb.org/68122 osvdb.org
- http://secunia.com/advisories/41444 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC70406 www-01.ibm.com
- http://www.ibm.com/support/docview.wss?uid=swg21446455 www.ibm.com
- http://www.securityfocus.com/bid/43291 www.securityfocus.com
- http://www.securitytracker.com/id?1024458 www.securitytracker.com
- http://www.vupen.com/english/advisories/2010/2425 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61873 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14609 oval.cisecurity.org
- http://osvdb.org/68122 osvdb.org
- http://secunia.com/advisories/41444 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC70406 www-01.ibm.com
- http://www.ibm.com/support/docview.wss?uid=swg21446455 www.ibm.com
- http://www.securityfocus.com/bid/43291 www.securityfocus.com
- http://www.securitytracker.com/id?1024458 www.securitytracker.com
- http://www.vupen.com/english/advisories/2010/2425 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61873 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14609 oval.cisecurity.org