| Package | Affected versions | Patched versions |
|---|---|---|
| db2 | = 9.7= 9.7.0.1= 9.7.0.2 |
IBM DB2 9.7 before FP3 does not perform the expected drops or invalidations of dependent functions upon a loss of privileges by the functions' owners, which allows remote authenticated users to bypass intended access restrictions via calls to these functions, a different vulnerability than CVE-2009-3471.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free