VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Oct 5, 2010· Updated Apr 29, 2026

CVE-2010-3739

CVE-2010-3739

Description

The audit facility in the Security component in IBM DB2 UDB 9.5 before FP6a uses instance-level audit settings to capture connection (aka CONNECT and AUTHENTICATION) events in certain circumstances in which database-level audit settings were intended, which might make it easier for remote attackers to connect without discovery.

Affected products

11
  • IBM/Db2 Universal Database11 versions
    cpe:2.3:a:ibm:db2_universal_database:9.5:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:ibm:db2_universal_database:9.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:9.5:fp2:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:9.5:fp2a:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:9.5:fp3:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:9.5:fp3a:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:9.5:fp3b:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:9.5:fp4:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:9.5:fp4a:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:9.5:fp5:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:*:fp6:*:*:*:*:*:*range: <=9.5

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.