Description
IBM DB2 9.7 before FP3 does not perform the expected drops or invalidations of dependent functions upon a loss of privileges by the functions' owners, which allows remote authenticated users to bypass intended access restrictions via calls to these functions, a different vulnerability than CVE-2009-3471.
References
- 43291 vdb-entry
- oval:org.mitre.oval:def:14669 vdb-entry signature
- ibm-db2-public-security-bypass(61872) vdb-entry
- IC68015 vendor-advisory
- ADV-2010-2425 vdb-entry
- 1024457 vdb-entry
- 41444 third-party-advisory
- 68121 vdb-entry
- http://www.ibm.com/support/docview.wss?uid=swg21446455