CVEvulnerability
CVE-2010-3734
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-10-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
The Install component in IBM DB2 UDB 9.5 before FP6a on Linux, UNIX, and Windows enforces an unintended limit on password length, which makes it easier for attackers to obtain access via a brute-force attack.
Affected configurations
• ibm db2 9.5
Related
Weakness · not in database (1)
References
- ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT public.dhe.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC62856 Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14764 oval.cisecurity.org
- ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT public.dhe.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC62856 Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14764 oval.cisecurity.org