CVE-2010-3733

published 2010-10-05

CVE-2010-3733: The Engine Utilities component in IBM DB2 UDB 9.5 before FP6a uses world-writable permissions for the sqllib/cfg/db2sprf file, which might allow local users to…

high 7.2 CVSS 3.1

AV L AC L Au N C C I C A C

The Engine Utilities component in IBM DB2 UDB 9.5 before FP6a uses world-writable permissions for the sqllib/cfg/db2sprf file, which might allow local users to gain privileges by modifying this file.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
ibm	db2	—	—

CWE-264