IBM DB2 9.1 < 9.1 Fix Pack 10 Multiple Vulnerabilities

Critical Nessus Network Monitor Plugin ID 5749


The remote IBM DB2 database server is affected by multiple vulnerabilities.


Versions of IBM DB2 9.1 earlier than Fix Pack 10 are potentially affected by multiple vulnerabilities :

- Multiple buffer overflow vulnerabilities exist in the DB2 Administrative Service (DAS) which could lead to a denial-of-service, or the execution of arbitrary code. (IC69986, IC71203)
- Users continue to have privilege to execute a non-DDL statement after their DBADM authority has been revoked. (IC66811)


Upgrade to IBM DB2 9.1 Fix Pack 10 or higher.

See Also

Plugin Details

Severity: Critical

ID: 5749

File Name: 5749.prm

Family: Database

Published: 2010/06/01

Modified: 2016/10/18

Dependencies: 9531

Nessus ID: 51840

Risk Information

Risk Factor: Critical


Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C


Base Score: 9.8

Temporal Score: 8.5


Temporal Vector: CVSS3#E:U/RL:O/RC:C

Vulnerability Information

Patch Publication Date: 2010/05/28

Vulnerability Publication Date: 2010/05/28

Reference Information

CVE: CVE-2011-0731, CVE-2011-0757, CVE-2010-3731

BID: 46052, 46064, 46077