 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| CVE ID: | CVE-2012-0709 |
| Description: | IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 does not properly check variables, which allows remote authenticated users to bypass intended restrictions on viewing table data by leveraging the CREATEIN privilege to execute crafted SQL CREATE VARIABLE statements. |
| Test IDs: | None available |
| Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2012-0709 AIX APAR: IC81387 http://www-01.ibm.com/support/docview.wss?uid=swg1IC81387 AIX APAR: IC81390 http://www-01.ibm.com/support/docview.wss?uid=swg1IC81390 AIX APAR: IC81836 http://www-01.ibm.com/support/docview.wss?uid=swg1IC81836 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15004 XForce ISS Database: db2-createvariable-security-bypass(73493) https://exchange.xforce.ibmcloud.com/vulnerabilities/73493 |