Summary
This host is installed with IBM DB2 and is prone to privilege escalation vulnerability.
Impact
Successful exploitation will allow local users to perform certain actions with escalated privileges and gain sensitive information.
Impact Level: Application
Solution
Upgrade to IBM DB2 version 9.5 FP9 or later,
For updates refer to http://www-01.ibm.com/support/docview.wss?uid=swg21588098
Insight
The flaw is due to an unspecified error in Tivoli Monitoring Agent.
Affected
IBM DB2 version 9.5 through FP8
References
Severity
Classification
-
CVE CVE-2012-1796 -
CVSS Base Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- appRain CMF SQL Injection And Cross Site Scripting Vulnerabilities
- Andy's PHP Knowledgebase 'step5.php' Remote PHP Code Execution Vulnerability
- Adobe ColdFusion Authentication Bypass Vulnerability
- Atlassian JIRA FishEye and Crucible Plugins XML Parsing Unspecified Security Vulnerability
- AIOCP 'cp_html2xhtmlbasic.php' Remote File Inclusion Vulnerability