CVE

Id
46317  
CVE No.
CVE-2010-3733  
Status
Candidate  
Description
The Engine Utilities component in IBM DB2 UDB 9.5 before FP6a uses world-writable permissions for the sqllib/cfg/db2sprf file, which might allow local users to gain privileges by modifying this file.  
Phase
Assigned (20101005)  
Votes
None (candidate not yet proposed)  
Comments