CVE-2010-3194: High severity ibm db2 universal database vulnerability
Published Aug 31, 2010
·Updated
The DB2DART program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows attackers to bypass intended file access restrictions via unspecified vectors related to overwriting files owned by an instance owner.
Affected Software
26 affected components
IBM DB2=9.1-fp4
IBM DB2=9.1-fp6a
IBM DB2=9.1-fp1
IBM DB2=9.1
IBM DB2=9.1-fp5
IBM DB2=9.1-fp3
IBM DB2=9.1-fp7a
IBM DB2=9.1-fp3a
IBM DB2=9.1-fp2a
IBM DB2=9.1-fp6
IBM DB2=9.1-fp8
IBM DB2=9.1-fp2
IBM DB2=9.1-fp4a
IBM DB2=9.1-fp7
IBM DB2=9.5
IBM DB2=9.5-fp4
IBM DB2=9.5-fp5
IBM DB2=9.5-fp4a
IBM DB2=9.5-fp1
IBM DB2=9.5-fp2a
IBM DB2=9.7-fp1
IBM DB2=9.5-fp3b
IBM DB2=9.5-fp2
IBM DB2=9.7
IBM DB2=9.5-fp3
IBM DB2=9.5-fp3a
Event History
Aug 31, 2010
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3194?
CVE-2010-3194 is classified as a medium severity vulnerability.
2
How do I fix CVE-2010-3194?
To fix CVE-2010-3194, upgrade IBM DB2 to version 9.1 FP9, 9.5 FP6, or 9.7 FP2 or later.
3
What software is affected by CVE-2010-3194?
CVE-2010-3194 affects IBM DB2 versions 9.1 (before FP9), 9.5 (before FP6), and 9.7 (before FP2).
4
What type of vulnerability is CVE-2010-3194?
CVE-2010-3194 is a file access restriction bypass vulnerability.
5
Can CVE-2010-3194 be exploited remotely?
CVE-2010-3194 can potentially be exploited remotely if proper access controls are not in place.