CVE-2005-2073: Low severity ibm db2 universal database vulnerability

Published Jun 29, 2005

Updated

Unknown vulnerability in IBM DB2 8.1.4 through 8.1.9 and 8.2.0 through 8.2.2 allows local users with SELECT privileges to conduct unauthorized activities and insert, update or delete table contents.

Affected Software

9 affected components

IBM DB2=8.2.2

IBM DB2=8.1.4

IBM DB2=8.1.7

IBM DB2=8.1.9

IBM DB2=8.1.5

IBM DB2=8.2.1

IBM DB2=8.1.8a

IBM DB2=8.1.6

IBM DB2=8.2.0

Remediation

Patch Available

http://www-1.ibm.com/support/search.wss?rs=0&q=IY73104&apar=only

Event History

Jun 29, 2005

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2073?

CVE-2005-2073 is considered a serious vulnerability due to the potential for unauthorized access and manipulation of data by local users.

How do I fix CVE-2005-2073?

To mitigate CVE-2005-2073, it is recommended to restrict SELECT privileges and apply any available patches or updates from IBM.

What types of activities can be conducted due to CVE-2005-2073?

CVE-2005-2073 allows local users to conduct unauthorized activities, thereby inserting, updating, or deleting table contents.

Which IBM DB2 versions are affected by CVE-2005-2073?

CVE-2005-2073 affects IBM DB2 versions 8.1.4 through 8.1.9 and 8.2.0 through 8.2.2.

Who is at risk due to CVE-2005-2073?

Local users with SELECT privileges on the affected IBM DB2 versions are at risk due to CVE-2005-2073.