IBM DB2 9.5 before FP7 and 9.7 before FP4 on Linux, UNIX, and Windows does not properly enforce privilege requirements for table access, which allows remote authenticated users to modify SYSSTAT.TABLES statistics columns via an UPDATE statement. NOTE: some of these details are obtained from third party information.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.vupen.com/english/advisories/2011/1083 | vdb-entry x_refsource_VUPEN |
| http://www-01.ibm.com/support/docview.wss?uid=swg1IC72119 | vendor-advisory x_refsource_AIXAPAR |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/66979 | vdb-entry x_refsource_XF |
| http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IC72119 | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/47525 | vdb-entry x_refsource_BID |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14122 | vdb-entry signature x_refsource_OVAL |
| http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IC71413 | x_refsource_CONFIRM |
| http://www-01.ibm.com/support/docview.wss?uid=swg1IC71413 | vendor-advisory x_refsource_AIXAPAR |
| http://secunia.com/advisories/44229 | third-party-advisory x_refsource_SECUNIA |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.vupen.com/english/advisories/2011/1083 | vdb-entry x_refsource_VUPEN x_transferred |
| http://www-01.ibm.com/support/docview.wss?uid=swg1IC72119 | vendor-advisory x_refsource_AIXAPAR x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/66979 | vdb-entry x_refsource_XF x_transferred |
| http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IC72119 | x_refsource_CONFIRM x_transferred |
| http://www.securityfocus.com/bid/47525 | vdb-entry x_refsource_BID x_transferred |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14122 | vdb-entry signature x_refsource_OVAL x_transferred |
| http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IC71413 | x_refsource_CONFIRM x_transferred |
| http://www-01.ibm.com/support/docview.wss?uid=swg1IC71413 | vendor-advisory x_refsource_AIXAPAR x_transferred |
| http://secunia.com/advisories/44229 | third-party-advisory x_refsource_SECUNIA x_transferred |