Test ID:	1.3.6.1.4.1.25623.1.0.901082
Category:	Databases
Title:	IBM Db2 UDB Multiple Unspecified Vulnerabilities - Windows
Summary:	IBM Db2 is prone to multiple vulnerabilities.
Description:	Summary: IBM Db2 is prone to multiple vulnerabilities. Vulnerability Insight: The flaws are due to: - An unspecified error in the Engine Utilities component, causes segmentation fault by modifying the db2ra data stream sent in a request from the load utility. - An unspecified error in 'db2licm' within the Engine Utilities component it has unknown impact and local attack vectors. - An unspecified error in the DRDA Services componenta, causes the server trap by calling a SQL stored procedure in unknown circumstances. - An error in relational data services component, allows attackers to obtain the password argument from the SET ENCRYPTION PASSWORD statement via vectors involving the GET SNAPSHOT FOR DYNAMIC SQL command. - Multiple unspecified errors in bundled stored procedures in the Spatial Extender component, have unknown impact and remote attack vectors. - An unspecified vulnerability in the Query Compiler, Rewrite, and Optimizer component, allows to cause a denial of service (instance crash) by compiling a SQL query. Vulnerability Impact: Successful exploitation will allow attacker to bypass security restrictions, cause a denial of service. Affected Software/OS: IBM Db2 version 9.5 prior to Fixpack 5. Solution: Update IBM Db2 9.5 Fixpack 5 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-4328 AIX APAR: IC64298 http://www-01.ibm.com/support/docview.wss?uid=swg1IC64298 BugTraq ID: 37332 http://www.securityfocus.com/bid/37332 http://secunia.com/advisories/37759 http://www.vupen.com/english/advisories/2009/3520 Common Vulnerability Exposure (CVE) ID: CVE-2009-4329 AIX APAR: IZ52083 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ52083 Common Vulnerability Exposure (CVE) ID: CVE-2009-4330 AIX APAR: IC62501 http://www-01.ibm.com/support/docview.wss?uid=swg1IC62501 Common Vulnerability Exposure (CVE) ID: CVE-2009-4333 AIX APAR: IZ38819 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ38819 Common Vulnerability Exposure (CVE) ID: CVE-2009-4335 AIX APAR: IC62625 http://www-01.ibm.com/support/docview.wss?uid=swg1IC62625 XForce ISS Database: ibm-db2-spatial-unspecified(55007) https://exchange.xforce.ibmcloud.com/vulnerabilities/55007 Common Vulnerability Exposure (CVE) ID: CVE-2009-4439 AIX APAR: JR31948 http://www-01.ibm.com/support/docview.wss?uid=swg1JR31948
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.