← Back

CVE-2011-0757

nvd nist
Published: Feb 2, 2011Modified: Apr 29, 2026

JSON object

Loading...
6.5
Vector
AV:N/AC:L/Au:S/C:P/I:P/A:P
Exploitability: 8.0 / Impact: 6.4
Source: NVD

Description

IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP2 on Linux, UNIX, and Windows does not properly revoke the DBADM authority, which allows remote authenticated users to execute non-DDL statements by leveraging previous possession of this authority.

Affected (28)

Products: Ibm: Db2
1 product
Db2
Configuration A
15 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Up to 9.1
Version 9.1
Version 9.1 fp1
Version 9.1 fp2
Version 9.1 fp2a
Version 9.1 fp3
Version 9.1 fp3a
Version 9.1 fp4
Version 9.1 fp4a
Version 9.1 fp5
Version 9.1 fp6
Version 9.1 fp6a
Version 9.1 fp7
Version 9.1 fp7a
Version 9.1 fp8
Configuration B
11 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Up to 9.5
Version 9.5
Version 9.5 fp1
Version 9.5 fp2
Version 9.5 fp2a
Version 9.5 fp3
Version 9.5 fp3a
Version 9.5 fp3b
Version 9.5 fp4
Version 9.5 fp4a
Version 9.5 fp5
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Up to 9.7
Version 9.7

Related CWEs

References (24)

Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.