CVE-2009-4325

CVSS V2 Medium 6.4 CVSS V3 None
Description
The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not validate an unspecified pointer, which allows attackers to overwrite "external memory" via unknown vectors, related to a missing "check for null pointers."
Overview
  • CVE ID
  • CVE-2009-4325
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2009-12-16T18:30:00
  • Last Modified Date
  • 2010-06-29T04:00:00
Weakness Enumerations
CWE URL
CWE-20 http://cwe.mitre.org/data/definitions/20.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:ibm:db2:8.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:8.2:fp1:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:8.2:fp10:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:8.2:fp11:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:8.2:fp12:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:8.2:fp13:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:8.2:fp14:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:8.2:fp15:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:8.2:fp16:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:8.2:fp17:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:8.2:fp2:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:8.2:fp3:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:8.2:fp4:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:8.2:fp5:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:8.2:fp6:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:8.2:fp7:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:8.2:fp8:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:8.2:fp9:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:9.1:fp6a:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:9.1:fp7:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:N/C:N/I:P/A:P
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • NONE
  • Integrity Impact
  • PARTIAL
  • Availability Impact
  • PARTIAL
  • Base Score
  • 6.4
  • Severity
  • MEDIUM
  • Exploitability Score
  • 10
  • Impact Score
  • 4.9
References
Reference URL Reference Tags
http://www-01.ibm.com/support/docview.wss?uid=swg1IC64702
ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT
http://www-01.ibm.com/support/docview.wss?uid=swg21293566 Patch Vendor Advisory
http://www.securityfocus.com/bid/37332
http://www-01.ibm.com/support/docview.wss?uid=swg1LI74504
ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT
http://www.vupen.com/english/advisories/2009/3520 Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21412902
ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT Patch
ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT
http://www-01.ibm.com/support/docview.wss?uid=swg1LI74500 Exploit Vendor Advisory
http://secunia.com/advisories/37759 Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1LI72709 Exploit Vendor Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2009-4325
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4325
History
Created Old Value New Value Data Type Notes
2022-05-10 11:10:06 Added to TrackCVE