The host is installed with IBM DB2 and is prone to multiple vulnerabilities.

Successful exploitation allows the attacker to potentially perform certain actions with escalated privileges or to bypass certain security restrictions. Impact Level: System/Application

Update DB2 8 Fixpak 18 or 9.1 Fixpak 8 or 9.5 Fixpak 4 or 9.7 Fixpak 1 or later. For updates refer to http://www-01.ibm.com/support/docview.wss?rs=71&uid=swg27007053

Multiple flaws are due to: - Unspecified error exists related to a table function when the definer loses required privileges. - Unspecified error that can be exploited to insert, update, or delete rows in a table without having required privileges. - Unspecified error in the handling of 'SET SESSION AUTHORIZATION' statements. - Error in 'DASAUTO' command, it can be run by non-privileged users.

IBM DB2 version 8 prior to Fixpak 18 IBM DB2 version 9.1 prior to Fixpak 8 IBM DB2 version 9.5 prior to Fixpak 4 IBM DB2 version 9.7 prior to Fixpak 1

• http://secunia.com/advisories/37454
• http://securitytracker.com/id?1023242
• http://www.vupen.com/english/advisories/2009/3340

---

Updated on 2017-03-28