Test ID:	1.3.6.1.4.1.25623.1.0.901074
Category:	Databases
Title:	IBM Db2 Multiple Unspecified Vulnerabilities - Windows
Summary:	IBM Db2 is prone to multiple vulnerabilities.
Description:	Summary: IBM Db2 is prone to multiple vulnerabilities. Vulnerability Insight: The flaws are due to: - An unspecified error in RAND scalar function in the common code infrastructure component when the Database Partitioning Feature (DPF) is used. - An error in common code infrastructure component does not properly validate the size of a memory pool during a creation attempt, which allows attackers to cause a denial of service via unspecified vectors. - An error in install component when configures the High Availability (HA) scripts with incorrect file-permission and authorization settings. Vulnerability Impact: Successful exploitation will allow attacker to bypass security restrictions, cause a denial of service and some are having unknown impact. Affected Software/OS: IBM Db2 version 9.5 prior to FP 5 and 9.7 prior to FP 1. Solution: Update IBM Db2 9.5 FP 5, 9.7 FP 1 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-4326 AIX APAR: IC63946 http://www-01.ibm.com/support/docview.wss?uid=swg1IC63946 AIX APAR: IZ44872 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44872 BugTraq ID: 37332 http://www.securityfocus.com/bid/37332 http://secunia.com/advisories/37759 http://www.vupen.com/english/advisories/2009/3520 Common Vulnerability Exposure (CVE) ID: CVE-2009-4327 AIX APAR: IC63179 http://www-01.ibm.com/support/docview.wss?uid=swg1IC63179 AIX APAR: IZ43772 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ43772 Common Vulnerability Exposure (CVE) ID: CVE-2009-4331 AIX APAR: IC63581 http://www-01.ibm.com/support/docview.wss?uid=swg1IC63581 AIX APAR: IC63959 http://www-01.ibm.com/support/docview.wss?uid=swg1IC63959
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.