CVE-2005-4738: Medium severity ibm db2 universal database vulnerability
IBM DB2 Universal Database (UDB) 810 before ESE AIX 5765F4100 does not ensure that a user has execute privileges before permitting object creation based on routines, which allows remote authenticated users to gain privileges.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4738?
CVE-2005-4738 has been classified as a high-severity vulnerability due to its potential to allow privilege escalation for remote authenticated users.
How do I fix CVE-2005-4738?
To mitigate CVE-2005-4738, ensure you apply all relevant patches from IBM for DB2 Universal Database versions 8.1.x before performing routine object creation.
Which versions of IBM DB2 Universal Database are affected by CVE-2005-4738?
CVE-2005-4738 affects IBM DB2 Universal Database versions 8.0, 8.1.4, 8.1.5, 8.1.6, 8.1.6c, 8.1.7, 8.1.7b, 8.1.8, 8.1.9, and related variants.
Who can exploit CVE-2005-4738?
CVE-2005-4738 can be exploited by remote authenticated users who have access to the DB2 Universal Database application.
What type of vulnerability is CVE-2005-4738?
CVE-2005-4738 is a privilege escalation vulnerability that occurs due to improper privilege checks before allowing object creation in IBM DB2.