CVE-2009-1905
03.06.2009, 21:00
The Common Code Infrastructure component in IBM DB2 8 before FP17, 9.1 before FP7, and 9.5 before FP4, when LDAP security (aka IBMLDAPauthserver) and anonymous bind are enabled, allows remote attackers to bypass password authentication and establish a database connection via unspecified vectors.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ibm | db2 | 𝑥 ≤ 8.0 |
| ibm | db2 | 𝑥 ≤ 9.1 |
| ibm | db2 | 𝑥 ≤ 9.5 |
| ibm | db2 | 8.0:fix_pack15 |
| ibm | db2 | 8.0:fp1 |
| ibm | db2 | 8.0:fp10 |
| ibm | db2 | 8.0:fp11 |
| ibm | db2 | 8.0:fp12 |
| ibm | db2 | 8.0:fp13 |
| ibm | db2 | 8.0:fp14 |
| ibm | db2 | 8.0:fp15 |
| ibm | db2 | 9.1:fp1 |
| ibm | db2 | 9.1:fp2 |
| ibm | db2 | 9.1:fp3 |
| ibm | db2 | 9.1:fp3a |
| ibm | db2 | 9.1:fp4a |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References