VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 5, 2010· Updated Jun 16, 2026

CVE-2010-3739

CVE-2010-3739

Description

The audit facility in the Security component in IBM DB2 UDB 9.5 before FP6a uses instance-level audit settings to capture connection (aka CONNECT and AUTHENTICATION) events in certain circumstances in which database-level audit settings were intended, which might make it easier for remote attackers to connect without discovery.

Affected products

12
  • IBM/Db2 Universal Database11 versions
    cpe:2.3:a:ibm:db2_universal_database:9.5:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:ibm:db2_universal_database:9.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:9.5:fp2:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:9.5:fp2a:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:9.5:fp3:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:9.5:fp3a:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:9.5:fp3b:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:9.5:fp4:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:9.5:fp4a:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:9.5:fp5:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:*:fp6:*:*:*:*:*:*range: <=9.5
  • IBM/DB2 UDBllm-fuzzy
    Range: 9.5 before FP6a

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.