ID de Prueba:	1.3.6.1.4.1.25623.1.0.901075
Categoría:	Databases
Título:	IBM Db2 Multiple Unspecified Vulnerabilities (Linux)
Resumen:	IBM Db2 is prone to multiple vulnerabilities.
Descripción:	Summary: IBM Db2 is prone to multiple vulnerabilities. Vulnerability Insight: The flaws are due to: - An unspecified error in RAND scalar function in the common code infrastructure component when the Database Partitioning Feature (DPF) is used. - An error in common code infrastructure component does not properly validate the size of a memory pool during a creation attempt, which allows attackers to cause a denial of service via unspecified vectors. - An error in install component when configures the High Availability (HA) scripts with incorrect file-permission and authorization settings. Vulnerability Impact: Successful exploitation will allow attacker to bypass security restrictions, cause a denial of service and some are having unknown impact. Affected Software/OS: IBM Db2 version 9.5 prior to FP 5 and 9.7 prior to FP 1. Solution: Update IBM Db2 9.5 FP 5, 9.7 FP 1 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	BugTraq ID: 37332 Common Vulnerability Exposure (CVE) ID: CVE-2009-4326 AIX APAR: IC63946 http://www-01.ibm.com/support/docview.wss?uid=swg1IC63946 AIX APAR: IZ44872 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44872 http://www.securityfocus.com/bid/37332 http://secunia.com/advisories/37759 http://www.vupen.com/english/advisories/2009/3520 Common Vulnerability Exposure (CVE) ID: CVE-2009-4327 AIX APAR: IC63179 http://www-01.ibm.com/support/docview.wss?uid=swg1IC63179 AIX APAR: IZ43772 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ43772 Common Vulnerability Exposure (CVE) ID: CVE-2009-4331 AIX APAR: IC63581 http://www-01.ibm.com/support/docview.wss?uid=swg1IC63581 AIX APAR: IC63959 http://www-01.ibm.com/support/docview.wss?uid=swg1IC63959
Copyright	Copyright (C) 2009 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.