CVE-2009-4328: Medium severity ibm db2 universal database vulnerability
Published Dec 16, 2009
·Updated
Unspecified vulnerability in the DRDA Services component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service (server trap) by calling a SQL stored procedure in unknown circumstances.
Affected Software
7 affected components
IBM DB2=9.5
IBM DB2=9.5-fp1
IBM DB2=9.5-fp2a
IBM DB2=9.5-fp3b
IBM DB2=9.5-fp2
IBM DB2=9.5-fp3
IBM DB2=9.5-fp3a
Remediation
Patch Available
Event History
Dec 16, 2009
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-4328?
CVE-2009-4328 is classified as a vulnerability that can lead to a denial of service.
2
Who is affected by CVE-2009-4328?
CVE-2009-4328 affects remote authenticated users of IBM DB2 9.5 and its first three fix packs.
3
How do I fix CVE-2009-4328?
To mitigate CVE-2009-4328, upgrade to IBM DB2 version 9.5 fix pack 5 or later.
4
What type of attacks are possible with CVE-2009-4328?
CVE-2009-4328 allows attackers to trigger server traps causing denial of service.
5
Is there a workaround for CVE-2009-4328?
There are no documented workarounds for CVE-2009-4328 besides upgrading the software.