Description
The Common Code Infrastructure component in IBM DB2 8 before FP17, 9.1 before FP7, and 9.5 before FP4, when LDAP security (aka IBMLDAPauthserver) and anonymous bind are enabled, allows remote attackers to bypass password authentication and establish a database connection via unspecified vectors.
References
- ibmdb2-ldap-security-bypass(50909) vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg21318189
- 36540 vdb-entry
- 35171 vdb-entry
- 1022319 vdb-entry
- JR32268 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21293566
- JR32272 vendor-advisory
- 31787 third-party-advisory
- JR32273 vendor-advisory
- 35235 third-party-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21386689