CVE-2009-4331

HIGH 7.2CVE-2009-4331 · Published 16/12/2009 · updated 16/06/2026

In short

CVE-2009-4331 is a HIGH (CVSS 7.2) vulnerability affecting db2 (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.52%, higher than 44.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
db2 ibm	`= 9.5= 9.7`	No fix yet

Description

The Install component in IBM DB2 9.5 before FP5 and 9.7 before FP1 configures the High Availability (HA) scripts with incorrect file-permission and authorization settings, which has unknown impact and local attack vectors.

References

ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT
ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT
public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT
secunia.com/advisories/37759 · Vendor Advisory
www-01.ibm.com/support/docview.wss · Exploit
www-01.ibm.com/support/docview.wss · Exploit
www-01.ibm.com/support/docview.wss · Patch
www-01.ibm.com/support/docview.wss · Vendor Advisory
securityfocus.com/bid/37332
vupen.com/english/advisories/2009/3520 · Vendor Advisory

More vulnerabilities in db2

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free