CVE-2009-4333 | BDVDB-2026-39646 Detail

Description#

The Relational Data Services component in IBM DB2 9.5 before FP5 allows attackers to obtain the password argument from the SET ENCRYPTION PASSWORD statement via vectors involving the GET SNAPSHOT FOR DYNAMIC SQL command.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg21293566
http://www.vupen.com/english/advisories/2009/3520
http://www.securityfocus.com/bid/37332
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ38819
http://www-01.ibm.com/support/docview.wss?uid=swg21412902
http://secunia.com/advisories/37759

Exploit#

No public exploit known

History#

Version 12009-12-16Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.