Back to search
CVE-2007-4417
Published: Aug 18, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 does not properly revoke privileges on methods, which allows remote authenticated users to execute a method after revocation until the routine auth cache is flushed.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://www-1.ibm.com/support/docview.wss?uid=swg21255607
x_refsource_CONFIRM
20070818 Recent DB2 Vulnerabilities
mailing-list
x_refsource_VIM
ADV-2007-2912
vdb-entry
x_refsource_VUPEN
IY88158
vendor-advisory
x_refsource_AIXAPAR
db2-method-privilege-escalation(36108)
vdb-entry
x_refsource_XF
25339
vdb-entry
x_refsource_BID
http://www-1.ibm.com/support/docview.wss?uid=swg21255352
x_refsource_CONFIRM
26471
third-party-advisory
x_refsource_SECUNIA
IY88226
vendor-advisory
x_refsource_AIXAPAR
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now