CVE

Id
46059  
CVE No.
CVE-2010-3475  
Status
Candidate  
Description
IBM DB2 9.7 before FP3 does not properly enforce privilege requirements for execution of entries in the dynamic SQL cache, which allows remote authenticated users to bypass intended access restrictions by leveraging the cache to execute an UPDATE statement contained in a compiled compound SQL statement.  
Phase
Assigned (20100920)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
500984 46059 CVE-2010-3475 CONFIRM:http://www.ibm.com/support/docview.wss?uid=swg21446455  View
500985 46059 CVE-2010-3475 AIXAPAR:IC70406  View
500986 46059 CVE-2010-3475 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IC70406  View
500987 46059 CVE-2010-3475 BID:43291  View
500988 46059 CVE-2010-3475 URL:http://www.securityfocus.com/bid/43291  View
500989 46059 CVE-2010-3475 OSVDB:68122  View
500990 46059 CVE-2010-3475 URL:http://osvdb.org/68122  View
500991 46059 CVE-2010-3475 OVAL:oval:org.mitre.oval:def:14609  View
500992 46059 CVE-2010-3475 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14609  View
500993 46059 CVE-2010-3475 SECTRACK:1024458  View
500994 46059 CVE-2010-3475 URL:http://www.securitytracker.com/id?1024458  View
500995 46059 CVE-2010-3475 SECUNIA:41444  View
500996 46059 CVE-2010-3475 URL:http://secunia.com/advisories/41444  View
500997 46059 CVE-2010-3475 VUPEN:ADV-2010-2425  View
500998 46059 CVE-2010-3475 URL:http://www.vupen.com/english/advisories/2010/2425  View
500999 46059 CVE-2010-3475 XF:ibm-db2-sql-security-bypass(61873)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37352 JVNDB-2010-003137 BoutikOne の list.php における SQL インジェクションの脆弱性 BoutikOne の list.php には、SQL インジェクションの脆弱性が存在します。 CVE-2010-3479 46059 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003137.html  View