CVE

Id
46058  
CVE No.
CVE-2010-3474  
Status
Candidate  
Description
IBM DB2 9.7 before FP3 does not perform the expected drops or invalidations of dependent functions upon a loss of privileges by the functions" owners, which allows remote authenticated users to bypass intended access restrictions via calls to these functions, a different vulnerability than CVE-2009-3471.  
Phase
Assigned (20100920)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
500968 46058 CVE-2010-3474 CONFIRM:http://www.ibm.com/support/docview.wss?uid=swg21446455  View
500969 46058 CVE-2010-3474 AIXAPAR:IC68015  View
500970 46058 CVE-2010-3474 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IC68015  View
500971 46058 CVE-2010-3474 BID:43291  View
500972 46058 CVE-2010-3474 URL:http://www.securityfocus.com/bid/43291  View
500973 46058 CVE-2010-3474 OSVDB:68121  View
500974 46058 CVE-2010-3474 URL:http://osvdb.org/68121  View
500975 46058 CVE-2010-3474 OVAL:oval:org.mitre.oval:def:14669  View
500976 46058 CVE-2010-3474 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14669  View
500977 46058 CVE-2010-3474 SECTRACK:1024457  View
500978 46058 CVE-2010-3474 URL:http://www.securitytracker.com/id?1024457  View
500979 46058 CVE-2010-3474 SECUNIA:41444  View
500980 46058 CVE-2010-3474 URL:http://secunia.com/advisories/41444  View
500981 46058 CVE-2010-3474 VUPEN:ADV-2010-2425  View
500982 46058 CVE-2010-3474 URL:http://www.vupen.com/english/advisories/2010/2425  View
500983 46058 CVE-2010-3474 XF:ibm-db2-public-security-bypass(61872)  View

Related JVN