CVE-2009-4333: Infoleak
First published: Wed Dec 16 2009(Updated: )
The Relational Data Services component in IBM DB2 9.5 before FP5 allows attackers to obtain the password argument from the SET ENCRYPTION PASSWORD statement via vectors involving the GET SNAPSHOT FOR DYNAMIC SQL command.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM DB2 Universal Database | =9.5 | |
| IBM DB2 Universal Database | =9.5-fp1 | |
| IBM DB2 Universal Database | =9.5-fp2a | |
| IBM DB2 Universal Database | =9.5-fp3b | |
| IBM DB2 Universal Database | =9.5-fp2 | |
| IBM DB2 Universal Database | =9.5-fp3 | |
| IBM DB2 Universal Database | =9.5-fp3a |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2009-4333?
CVE-2009-4333 is rated as medium severity due to the potential for unauthorized access to sensitive information.
How do I fix CVE-2009-4333?
To remediate CVE-2009-4333, it is recommended to upgrade to a patched version of IBM DB2 9.5, specifically after FP5.
What versions of IBM DB2 are affected by CVE-2009-4333?
CVE-2009-4333 affects IBM DB2 version 9.5 and its fix packs before FP5.
What type of vulnerability is CVE-2009-4333?
CVE-2009-4333 is a vulnerability related to information disclosure that can expose passwords.
Is there a workaround for CVE-2009-4333?
There are no known effective workarounds for CVE-2009-4333 other than applying the security updates provided by IBM.
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/remedy
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/ibm
- canonical/ibm db2 universal database
- version/ibm db2 universal database/9.5
- version/ibm db2 universal database/9.5-fp1
- version/ibm db2 universal database/9.5-fp2a
- version/ibm db2 universal database/9.5-fp3b
- version/ibm db2 universal database/9.5-fp2
- version/ibm db2 universal database/9.5-fp3
- version/ibm db2 universal database/9.5-fp3a