Vulnerability in IBM Db2

CVE-2010-3733

The Engine Utilities component in IBM DB2 UDB 9.5 before FP6a uses world-writable permissions for the sqllib/cfg/db2sprf file, which might allow local users to gain privileges by modifying this file.

EPSS: 0.003 (23.0th percentile) — read the EPSS interpretation.

Affected products

Ibm Db2 — versions 9.5
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (vendor-advisory, x_refsource_AIXAPAR)
cve@mitre.org (signature, x_refsource_OVAL, vdb-entry)