Test Kennung:	1.3.6.1.4.1.25623.1.0.811693
Kategorie:	Databases
Titel:	IBM Db2 Multiple Privilege Escalation Vulnerabilities
Zusammenfassung:	IBM DB2 is prone to multiple privilege escalation vulnerabilities.
Beschreibung:	Summary: IBM DB2 is prone to multiple privilege escalation vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - An unauthorized command that allows the database to be activated when authentication type is CLIENT. - Multiple errors in validating privileges of local users. Vulnerability Impact: Successful exploitation will allow attacker to obtain root access and a user without proper authority can activate database. Affected Software/OS: IBM Db2 versions 9.7 before 9.7 FP11, 10.1 before 10.1 FP6, 10.5 before 10.5 FP8 and 11.1.2.2 before 11.1.2.2 FP2. Solution: Apply the appropriate fix from reference links CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-1520 BugTraq ID: 100684 http://www.securityfocus.com/bid/100684 https://exchange.xforce.ibmcloud.com/vulnerabilities/129830 http://www.securitytracker.com/id/1039308 Common Vulnerability Exposure (CVE) ID: CVE-2017-1451 BugTraq ID: 100690 http://www.securityfocus.com/bid/100690 https://exchange.xforce.ibmcloud.com/vulnerabilities/128178 http://www.securitytracker.com/id/1039301 Common Vulnerability Exposure (CVE) ID: CVE-2017-1452 BugTraq ID: 100698 http://www.securityfocus.com/bid/100698 https://exchange.xforce.ibmcloud.com/vulnerabilities/128180 http://www.securitytracker.com/id/1039299 Common Vulnerability Exposure (CVE) ID: CVE-2017-1439 https://exchange.xforce.ibmcloud.com/vulnerabilities/128058 Common Vulnerability Exposure (CVE) ID: CVE-2017-1438 BugTraq ID: 100685 http://www.securityfocus.com/bid/100685 https://exchange.xforce.ibmcloud.com/vulnerabilities/128057 http://www.securitytracker.com/id/1039300
Copyright	Copyright (C) 2017 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.