Description
IBM DB2 UDB 8 before Fixpak 15 does not properly check authorization, which allows remote authenticated users with a certain SELECT privilege to have an unknown impact via unspecified vectors. NOTE: this issue is probably related to CVE-2007-1089, but this is uncertain due to lack of details.
References
- JR25940 vendor-advisory
- 20070818 Recent DB2 Vulnerabilities mailing-list
- ADV-2007-2912 vdb-entry
- 25339 vdb-entry
- db2-select-unspecified(36109) vdb-entry
- http://www-1.ibm.com/support/docview.wss?uid=swg21255352
- 26471 third-party-advisory