Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-1089

IBM DB2 Universal Database (UDB) 9.1 GA through 9.1 FP1 allows local users with table SELECT privileges to perform unauthorized UPDATE and DELETE SQL commands via unknown vectors.

Published

2007-02-23T22:28:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.2 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System linux linux_kernel 2.6.18.0 No
Operating System linux linux_kernel 2.6.18.1 No
Operating System linux linux_kernel 2.6.18.2 No
Operating System linux linux_kernel 2.6.18.3 No
Operating System linux linux_kernel 2.6.18.4 No
Operating System linux linux_kernel 2.6.18.5 No
Operating System linux linux_kernel 2.6.18.6 No
Operating System linux linux_kernel 2.6.18.7 No
Operating System linux linux_kernel 2.6.19 No
Operating System linux linux_kernel 2.6.19.1 No
Operating System linux linux_kernel 2.6.19.2 No
Operating System linux linux_kernel 2.6.19.3 No
Operating System linux linux_kernel 2.6.19.4 No
Operating System linux linux_kernel 2.6.20 No
Operating System linux linux_kernel 2.6.20.1 No
Operating System microsoft windows_xp * No
Application ibm db2_universal_database ≤ 9.1 Yes
Application ibm db2_universal_database 9.1 Yes
References