Description
IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP2 does not perform the expected drops of certain table functions upon a loss of privileges by the functions' definers, which has unspecified impact and remote attack vectors.
References
- 58477 vdb-entry
- 36540 vdb-entry
- IC63548 vendor-advisory
- 36890 third-party-advisory
- IZ46773 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21426108
- IZ46658 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21432298
- IZ46774 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21403619
- http://www-01.ibm.com/support/docview.wss?uid=swg21386689