CVE-2009-4331 — IBM DB2 vulnerability

CWE-2643 documents3 sources
Severity
7.2HIGHNVD
EPSS
0.1%
top 73.33%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM DB2
Timeline
PublishedDec 16
Latest updateMay 3

Description

The Install component in IBM DB2 9.5 before FP5 and 9.7 before FP1 configures the High Availability (HA) scripts with incorrect file-permission and authorization settings, which has unknown impact and local attack vectors.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

▶NVDibm/db29.5, 9.7+1

Patches

Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-hmpq-6g4f-rqp2: The Install component in IBM DB2 9↗2022-05-03
▶
CVEList
CVE-2009-4331: The Install component in IBM DB2 9↗2009-12-16
▶
CVE-2009-4331 — IBM DB2 vulnerability | cvebase