CVE-2010-3733
05.10.2010, 18:00
The Engine Utilities component in IBM DB2 UDB 9.5 before FP6a uses world-writable permissions for the sqllib/cfg/db2sprf file, which might allow local users to gain privileges by modifying this file.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ibm | db2 | 9.5 |
| ibm | db2 | 9.5:fp1 |
| ibm | db2 | 9.5:fp2 |
| ibm | db2 | 9.5:fp2a |
| ibm | db2 | 9.5:fp3 |
| ibm | db2 | 9.5:fp3a |
| ibm | db2 | 9.5:fp3b |
| ibm | db2 | 9.5:fp4 |
| ibm | db2 | 9.5:fp4a |
| ibm | db2 | 9.5:fp5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References