CVE-2010-3194

HIGH 7.5CVE-2010-3194 · Published 31/08/2010 · updated 16/06/2026

In short

CVE-2010-3194 is a HIGH (CVSS 7.5) vulnerability affecting db2 (ibm).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 79.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
db2 ibm	`= 9.1= 9.5= 9.7`	No fix yet

Description

The DB2DART program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows attackers to bypass intended file access restrictions via unspecified vectors related to overwriting files owned by an instance owner.

References

public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT
secunia.com/advisories/41218 · Vendor Advisory
www-01.ibm.com/support/docview.wss
www-01.ibm.com/support/docview.wss · Vendor Advisory
www-01.ibm.com/support/docview.wss · Vendor Advisory
www-01.ibm.com/support/docview.wss · Vendor Advisory
www-01.ibm.com/support/docview.wss · Vendor Advisory
vupen.com/english/advisories/2010/2225 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/61445
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13841

More vulnerabilities in db2

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free