CVE-2010-3733
The Engine Utilities component in IBM DB2 UDB 9.5 before FP6a uses world-writable permissions for the sqllib/cfg/db2sprf file, which might allow local users to gain privileges by modifying this file.
- Score
- CVSS 2.0 7.2 High
- Status
- Modified - cve@mitre.org
- Published
- 2010-10-05
- Last modified
- 2024-08-07
- Weaknesses
- CWE-264
Affected products
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IZ68463
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14707
