CVE-2009-3473 | BDVDB-2026-38742 Detail

Description#

IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which has unspecified impact and remote attack vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/36540
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55883
http://osvdb.org/58479
http://secunia.com/advisories/36890
http://www-01.ibm.com/support/docview.wss?uid=swg21403619

Exploit#

No public exploit known

History#

Version 12009-09-29Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.