VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 2, 2011· Updated Jun 16, 2026

CVE-2011-0757

CVE-2011-0757

Description

IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP2 on Linux, UNIX, and Windows does not properly revoke the DBADM authority, which allows remote authenticated users to execute non-DDL statements by leveraging previous possession of this authority.

Affected products

29
  • IBM/Db229 versions
    cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:*+ 28 more
    • cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.1:fp2a:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.1:fp6a:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.1:fp7:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.1:fp7a:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.1:fp8:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.5:fp4:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.5:fp4a:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.5:fp5:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:*:fp1:*:*:*:*:*:*range: <=9.7
    • cpe:2.3:a:ibm:db2:*:fp6:*:*:*:*:*:*range: <=9.5
    • cpe:2.3:a:ibm:db2:*:fp9:*:*:*:*:*:*range: <=9.1
    • (no CPE)range: 9.1 < FP10, 9.5 < FP6a, 9.7 < FP2

Patches

Vulnerability mechanics

References

12

News mentions

0

No linked articles in our index yet.