CVE-2009-4333

EPSS 0.35%
Veröffentlicht 16.12.2009 18:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

The Relational Data Services component in IBM DB2 9.5 before FP5 allows attackers to obtain the password argument from the SET ENCRYPTION PASSWORD statement via vectors involving the GET SNAPSHOT FOR DYNAMIC SQL command.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Db2 Version9.5

Ibm ≫ Db2 Version9.5 Updatefp1

Ibm ≫ Db2 Version9.5 Updatefp2

Ibm ≫ Db2 Version9.5 Updatefp2a

Ibm ≫ Db2 Version9.5 Updatefp3

Ibm ≫ Db2 Version9.5 Updatefp3a

Ibm ≫ Db2 Version9.5 Updatefp3b

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.35%	0.543

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT

http://www-01.ibm.com/support/docview.wss?uid=swg21293566

Patch

http://secunia.com/advisories/37759

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21412902

Vendor Advisory

http://www.securityfocus.com/bid/37332

http://www.vupen.com/english/advisories/2009/3520

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1IZ38819

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2009-4333

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-4333

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-4333

EUVD