CVE-2010-3734: Medium severity IBM DB2 vulnerability

Published Oct 5, 2010

Updated

The Install component in IBM DB2 UDB 9.5 before FP6a on Linux, UNIX, and Windows enforces an unintended limit on password length, which makes it easier for attackers to obtain access via a brute-force attack.

Affected Software

10 affected components

IBM DB2=9.5

IBM DB2=9.5-fp4

IBM DB2=9.5-fp5

IBM DB2=9.5-fp4a

IBM DB2=9.5-fp1

IBM DB2=9.5-fp2a

IBM DB2=9.5-fp3b

IBM DB2=9.5-fp2

IBM DB2=9.5-fp3

IBM DB2=9.5-fp3a

Event History

Oct 5, 2010

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-3734?

CVE-2010-3734 is classified as a medium severity vulnerability due to its ability to facilitate brute-force attacks on password authentication.

How do I fix CVE-2010-3734?

To mitigate CVE-2010-3734, upgrade to IBM DB2 version 9.5 Fix Pack 6a or later.

What systems are affected by CVE-2010-3734?

CVE-2010-3734 affects IBM DB2 UDB version 9.5 prior to Fix Pack 6a on Linux, UNIX, and Windows systems.

What type of attack does CVE-2010-3734 enable?

CVE-2010-3734 enables attackers to conduct brute-force attacks more easily due to the unintended password length limit.

Is there a workaround for CVE-2010-3734?

There is no official workaround for CVE-2010-3734, so applying the recommended updates is essential.