CVE-2009-1905

published 2009-06-03

CVE-2009-1905: The Common Code Infrastructure component in IBM DB2 8 before FP17, 9.1 before FP7, and 9.5 before FP4, when LDAP security (aka IBMLDAPauthserver) and anonymous…

Priority P4 21 low 2.6 CVSS 2.0

AV N AC H Au N C P I N A N

The Common Code Infrastructure component in IBM DB2 8 before FP17, 9.1 before FP7, and 9.5 before FP4, when LDAP security (aka IBMLDAPauthserver) and anonymous bind are enabled, allows remote attackers to bypass password authentication and establish a database connection via unspecified vectors.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
ibm	db2	<= 8.0	—
ibm	db2	<= 9.1	—
ibm	db2	<= 9.5	—
ibm	db2	—	—
ibm	db2	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-287