IBM DB2 9.5 before FP7 and 9.7 before FP4 on Linux, UNIX, and Windows does not properly revoke role membership from groups, which allows remote authenticated users to execute non-DDL statements by leveraging previous inherited possession of a role, a different vulnerability than CVE-2011-0757. NOTE: some of these details are obtained from third party information.

According to its version, the installation of IBM DB2 9.7 running on the remote host is prior to Fix Pack 4. It is, therefore, affected by one or more of the following issues :

  - An unspecified error in the Relational Data Services     component can be exploited to update statistics for     tables without the appropriate privileges. (IC72119)

  - An error in the Relational Data Services component may     grant users privileges to execute non-DDL statements     after role membership has been revoked from its group.
    (IC71375)

Versions of IBM DB2 9.7 earlier than Fix Pack 4 are potentially affected by multiple vulnerabilities :

 - It may be possible for users to updates statistics for tables without appropriate privileges. (IC72119)
 - Users continue to have privilege to execute a non-DDL statement after role membership has been revoked from its group. (IC71375)

Versions of IBM DB2 9.5 earlier than Fix Pack 7 are potentially affected by multiple vulnerabilities :

  - A buffer overflow vulnerability exists in the DB2 Administrative Service (DAS). (IC72028)
 - It is possible to update statistics for tables without appropriate privileges. (IC71413)
 - It is possible for a user to execute a non-DDL statement after role memebership has been revoked from its group. (IC71263)

According to its version, the installation of IBM DB2 9.5 running on the remote host is prior Fix Pack 7. It is, therefore, affected by the following vulnerabilities :

  - The 'db2dasrrm' component included with such versions     fails to perform sufficient bounds checks on user-     supplied input, which an attacker could leverage to     overflow the buffer, potentially resulting in arbitrary     code execution on the remote system. (IC72028)

  - An unspecified error in the Relational Data Services     component can be exploited to update statistics for     tables without the appropriate privileges. (IC71413)

  - An error in the Relational Data Services component may     grant users privileges to execute non-DDL statements     after role membership has been revoked from its group.
    (IC71263)

ID	Name	Product	Family	Severity
53547	IBM DB2 9.7 < Fix Pack 4 Multiple Vulnerabilities	Nessus	Databases	high
5896	IBM DB2 9.7 < 9.7 Fix Pack 4 Multiple Vulnerabilities	Nessus Network Monitor	Database	medium
5750	IBM DB2 9.5 < 9.5 Fix Pack 7 Multiple Vulnerabilities	Nessus Network Monitor	Database	critical
51841	IBM DB2 9.5 < Fix Pack 7 Multiple Vulnerabilities	Nessus	Databases	critical

Detections

Analytics

CVE-2011-1846

high

Tenable Plugins

high

medium

critical

critical