Unspecified vulnerability in the DB2DART tool in IBM DB2 UDB 9.1 before Fixpak 4 allows attackers to execute arbitrary commands as the DB2 instance owner, related to invocation of TPUT by DB2DART.
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Link | Tags |
---|---|
http://www-1.ibm.com/support/docview.wss?uid=swg21255607 | |
http://www.vupen.com/english/advisories/2007/3867 | vdb entry |
http://www.securityfocus.com/bid/26450 | vdb entry patch |
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ03646 | vendor advisory |
http://secunia.com/advisories/27667 | third party advisory patch vendor advisory |