ID de Prueba:	1.3.6.1.4.1.25623.1.0.801503
Categoría:	Databases
Título:	IBM Db2 Multiple Vulnerabilities (Sep10)
Resumen:	IBM DB2 and is prone to multiple vulnerabilities.
Descripción:	Summary: IBM DB2 and is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - An unspecified error related to 'DB2STST' program, which has unknown impact and attack vectors. - An error related to 'DB2DART' program, which could be exploited to overwrite files owned by the instance owner. Vulnerability Impact: Successful exploitation will allow attackers to bypass security restrictions, gain knowledge of sensitive information or cause a denial of service. Affected Software/OS: IBM Db2 versions prior to 9.1 Fix Pack 9, IBM Db2 versions prior to 9.5 Fix Pack 6 and IBM Db2 versions prior to 9.7 Fix Pack 2. Solution: Update Db2 9.1 Fix Pack 9, 9.5 Fix Pack 6, or 9.7 Fix Pack 2. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3193 AIX APAR: IC65408 http://www-01.ibm.com/support/docview.wss?uid=swg1IC65408 AIX APAR: IC65703 http://www-01.ibm.com/support/docview.wss?uid=swg1IC65703 AIX APAR: IC65742 http://www-01.ibm.com/support/docview.wss?uid=swg1IC65742 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14190 http://secunia.com/advisories/41218 http://www.vupen.com/english/advisories/2010/2225 XForce ISS Database: db2-db2stst-unspecified(61444) https://exchange.xforce.ibmcloud.com/vulnerabilities/61444 Common Vulnerability Exposure (CVE) ID: CVE-2010-3194 AIX APAR: IC65749 http://www-01.ibm.com/support/docview.wss?uid=swg1IC65749 AIX APAR: IC65756 http://www-01.ibm.com/support/docview.wss?uid=swg1IC65756 AIX APAR: IC65762 http://www-01.ibm.com/support/docview.wss?uid=swg1IC65762 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13841 XForce ISS Database: db2-db2dart-priv-escalation(61445) https://exchange.xforce.ibmcloud.com/vulnerabilities/61445
Copyright	Copyright (C) 2010 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.