4.3

CVE-2009-4326

The RAND scalar function in the Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1, when the Database Partitioning Feature (DPF) is used, produces "repeating" return values, which might allow attackers to defeat protection mechanisms based on randomization by predicting a value.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Db2 Version9.5
Ibm ≫ Db2 Version9.5 Updatefp1
Ibm ≫ Db2 Version9.5 Updatefp2
Ibm ≫ Db2 Version9.5 Updatefp2a
Ibm ≫ Db2 Version9.5 Updatefp3
Ibm ≫ Db2 Version9.5 Updatefp3a
Ibm ≫ Db2 Version9.5 Updatefp3b
Ibm ≫ Db2 Version9.7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.79% 0.756
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT
http://www-01.ibm.com/support/docview.wss?uid=swg21293566
Patch
ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT
http://secunia.com/advisories/37759
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21412902
Vendor Advisory
http://www.securityfocus.com/bid/37332
http://www.vupen.com/english/advisories/2009/3520
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IC63946
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44872