Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-4150

dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors.

Published

2009-12-02T11:30:00.627

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.6 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

3.9

Impact Score

6.4

Weaknesses

Type: Primary
CWE-264

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	ibm	db2	9.1	Yes
Application	ibm	db2	9.1	Yes
Application	ibm	db2	9.1	Yes
Application	ibm	db2	9.1	Yes
Application	ibm	db2	9.1	Yes
Application	ibm	db2	9.1	Yes
Application	ibm	db2	9.1	Yes
Application	ibm	db2	9.1	Yes
Application	ibm	db2	9.1	Yes
Application	ibm	db2	9.5	Yes
Application	ibm	db2	9.5	Yes
Application	ibm	db2	9.5	No
Application	ibm	db2	9.5	Yes
Application	ibm	db2	9.5	No
Application	ibm	db2	9.5	No
Application	ibm	db2	9.7	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes
Application	ibm	db2_universal_database	8	Yes

References

http://secunia.com/advisories/36890 Vendor Advisory ([email protected])
http://secunia.com/advisories/37454 Vendor Advisory ([email protected])
http://securitytracker.com/id?1023242 ([email protected])
http://www-01.ibm.com/support/docview.wss?uid=swg1IC64759 ([email protected])
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40340 ([email protected])
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40343 ([email protected])
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40352 ([email protected])
http://www-01.ibm.com/support/docview.wss?uid=swg21386689 Patch, Vendor Advisory ([email protected])
http://www-01.ibm.com/support/docview.wss?uid=swg21403619 Patch, Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2009/3340 Vendor Advisory ([email protected])
http://secunia.com/advisories/36890 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/37454 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1023242 (af854a3a-2127-422b-91ae-364da2661108)
http://www-01.ibm.com/support/docview.wss?uid=swg1IC64759 (af854a3a-2127-422b-91ae-364da2661108)
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40340 (af854a3a-2127-422b-91ae-364da2661108)
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40343 (af854a3a-2127-422b-91ae-364da2661108)
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40352 (af854a3a-2127-422b-91ae-364da2661108)
http://www-01.ibm.com/support/docview.wss?uid=swg21386689 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www-01.ibm.com/support/docview.wss?uid=swg21403619 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2009/3340 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)