NVD

Id
51457  
Name
CVE-2009-4334  
Description
The Self Tuning Memory Manager (STMM) component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 uses 0666 permissions for the STMM log file, which allows local users to cause a denial of service or have unspecified other impact by writing to this file.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-12-16  
Modified Date
2010-06-29  
Seq
2009-4334  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
261047 51457 CVE-2009-4334 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT  View
261048 51457 CVE-2009-4334 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT  View
261049 51457 CVE-2009-4334 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT  View
261050 51457 CVE-2009-4334 IC64019  View
261051 51457 CVE-2009-4334 IZ50355  View
261052 51457 CVE-2009-4334 http://www-01.ibm.com/support/docview.wss?uid=swg21293566  View
261053 51457 CVE-2009-4334 http://www-01.ibm.com/support/docview.wss?uid=swg21412902  View
261054 51457 CVE-2009-4334 37332  View
261055 51457 CVE-2009-4334 ADV-2009-3520  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44204 JVNDB-2009-005211 IBM DB2 の STMM コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 IBM DB2 の Self Tuning Memory Manager (STMM) コンポーネントは、STMM ログファイルに 0666 パーミッションを使用するため、サービス運用妨害 (DoS) 状態となるなどの脆弱性が存在します。 CVE-2009-4334 41765 CVE-2009-4334 51457 4.6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005211.html 2009-12-16 2012-09-25 View