Lucene search
HistorySep 29, 2009 - 9:30 p.m.
CVE-2009-3473
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.5
Confidence
Low
EPSS
0.003
Percentile
69.4%
IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which has unspecified impact and remote attack vectors.
Affected configurations
Node
ibmdb2Match9.1fp1
ORibmdb2Match9.1fp2
ORibmdb2Match9.1fp3
ORibmdb2Match9.1fp4
ORibmdb2Match9.1fp5
ORibmdb2Match9.1fp6
ORibmdb2Match9.1fp7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | db2 | 9.1 | cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:* |
| ibm | db2 | 9.1 | cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:* |
| ibm | db2 | 9.1 | cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:* |
| ibm | db2 | 9.1 | cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:* |
| ibm | db2 | 9.1 | cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:* |
| ibm | db2 | 9.1 | cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:* |
| ibm | db2 | 9.1 | cpe:2.3:a:ibm:db2:9.1:fp7:*:*:*:*:*:* |
Related
prion
prion
Authorization
2009-09-29 21:30:00
openvas
openvas
IBM DB2 Unspecified Vulnerability (Linux)
2009-10-06 00:00:00
IBM Db2 Unspecified Vulnerability - Windows
2009-10-06 00:00:00
IBM DB2 Unspecified Vulnerability (Windows)
2009-10-06 00:00:00
cvelist
cvelist
CVE-2009-3473
2009-09-29 21:00:00
cve
cve
CVE-2009-3473
2009-09-29 21:30:00
nessus
nessus
IBM DB2 9.1 < Fix Pack 8 Multiple Vulnerabilities
2009-10-06 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.5
Confidence
Low
EPSS
0.003
Percentile
69.4%
Related for NVD:CVE-2009-3473