ID de Prueba:	1.3.6.1.4.1.25623.1.0.803758
Categoría:	Databases
Título:	IBM Db2 DML Statement Execution Remote Privilege Escalation Vulnerability (Linux)
Resumen:	IBM DB2 is prone to a privilege escalation vulnerability.
Descripción:	Summary: IBM DB2 is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw is due to the program failing to limit users from the EXPLAIN authority, which will allow a remote attacker to potentially execute the SELECT, INSERT, UPDATE or DELETE DML statements with elevated privileges. Vulnerability Impact: Successful exploitation will allow attacker to gain escalated privileges and bypass certain security restrictions. Affected Software/OS: IBM Db2 versions 9.8 through FP5 on Linux. Solution: Apply the appropriate fix CVSS Score: 4.6 CVSS Vector: AV:N/AC:H/Au:S/C:P/I:P/A:P
Referencia Cruzada:	BugTraq ID: 62018 Common Vulnerability Exposure (CVE) ID: CVE-2013-4033 AIX APAR: IC94523 http://www-01.ibm.com/support/docview.wss?uid=swg1IC94523 AIX APAR: IC94756 http://www-01.ibm.com/support/docview.wss?uid=swg1IC94756 AIX APAR: IC94757 http://www-01.ibm.com/support/docview.wss?uid=swg1IC94757 AIX APAR: IC94758 http://www-01.ibm.com/support/docview.wss?uid=swg1IC94758 XForce ISS Database: db2-explain-cve20134033-priv-esc(86093) https://exchange.xforce.ibmcloud.com/vulnerabilities/86093
Copyright	Copyright (C) 2013 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.