IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP2 does not perform the expected drops of certain table functions upon a loss of privileges by the functions' definers, which has unspecified impact and remote attack vectors.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2009-09-29 14:30
Updated : 2010-10-06 22:42
NVD link : CVE-2009-3471
Mitre link : CVE-2009-3471
JSON object : View
CWE
Products Affected
ibm
- db2