CVE-2013-4033: Medium severity IBM DB2 vulnerability

Published Aug 28, 2013

Updated

IBM DB2 and DB2 Connect 9.7 through FP8, 9.8 through FP5, 10.1 through FP2, and 10.5 through FP1 allow remote authenticated users to execute DML statements by leveraging EXPLAIN authority.

Affected Software

9 affected components

IBM DB2=9.7

IBM DB2=9.8

IBM DB2=10.1

IBM DB2=10.5

IBM DB2 Connect=9.5

IBM DB2 Connect=9.7

IBM DB2 Connect=9.8

IBM DB2 Connect=10.1

IBM DB2 Connect=10.5

Event History

Aug 28, 2013

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-4033?

CVE-2013-4033 has a medium severity rating, indicating a potential risk to systems using the affected IBM DB2 versions.

How do I fix CVE-2013-4033?

To fix CVE-2013-4033, apply the recommended patches or update to non-vulnerable versions of IBM DB2 and DB2 Connect.

Who is affected by CVE-2013-4033?

CVE-2013-4033 affects remote authenticated users of IBM DB2 and DB2 Connect on specific versions listed in the vulnerability details.

What kind of attacks can CVE-2013-4033 facilitate?

CVE-2013-4033 can facilitate unauthorized execution of DML statements by users with EXPLAIN authority.

Is there a workaround for CVE-2013-4033?

While the primary solution is to patch, a temporary workaround may include restricting EXPLAIN authority for users until a patch is applied.