Test ID:	1.3.6.1.4.1.25623.1.0.800703
Category:	Databases
Title:	IBM Db2 Information Disclosure Vulnerability - Linux
Summary:	IBM Db2 is prone to an information disclosure vulnerability.
Description:	Summary: IBM Db2 is prone to an information disclosure vulnerability. Vulnerability Insight: This flaw is due to the 'INNER JOIN' and 'OUTER JOIN' predicate which allows remote attackers to execute arbitrary queries. Vulnerability Impact: Successful exploitation will let the attacker gain sensitive information of the affected remote system. Affected Software/OS: IBM Db2 versions 9.1 before 9.1 FP7. Solution: Apply the update described in the referenced advisory. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1239 AIX APAR: JR31886 http://www-01.ibm.com/support/docview.wss?uid=swg1JR31886 http://www.vupen.com/english/advisories/2009/0912 XForce ISS Database: db2-predicate-information-disclosure(49864) https://exchange.xforce.ibmcloud.com/vulnerabilities/49864
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.