CVE-2009-4150

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/36890Vendor Advisory
http://secunia.com/advisories/37454Vendor Advisory
http://securitytracker.com/id?1023242
http://www-01.ibm.com/support/docview.wss?uid=swg1IC64759
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40340
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40343
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40352
http://www-01.ibm.com/support/docview.wss?uid=swg21386689Patch, Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21403619Patch, Vendor Advisory
http://www.vupen.com/english/advisories/2009/3340Vendor Advisory
http://secunia.com/advisories/36890Vendor Advisory
http://secunia.com/advisories/37454Vendor Advisory
http://securitytracker.com/id?1023242
http://www-01.ibm.com/support/docview.wss?uid=swg1IC64759
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40340
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40343
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40352
http://www-01.ibm.com/support/docview.wss?uid=swg21386689Patch, Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21403619Patch, Vendor Advisory
http://www.vupen.com/english/advisories/2009/3340Vendor Advisory

Timeline

Published: Dec 2, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2009

CVE-2009-41515.8Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 and 3.8.x through 3.8.CVE-2009-41524.3Cross-site scripting (XSS) vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x before 6.1.0.3 allows remote attackers CVE-2009-41537.5Unspecified vulnerability in the XMLAccess component in IBM WebSphere Portal 6.1.x before 6.1.0.3 has unknown impact and attack vectors, rel CVE-2009-41545.0Directory traversal vulnerability in includes/feedcreator.class.php in Elxis CMS allows remote attackers to read arbitrary files via a .. (d CVE-2009-41557.5Multiple SQL injection vulnerabilities in Eshopbuilde CMS allow remote attackers to execute arbitrary SQL commands via the sitebid parameter CVE-2009-41567.5PHP remote file inclusion vulnerability in modules/pms/index.php in Ciamos CMS 0.9.5 and earlier allows remote attackers to execute arbitrar CVE-2009-41574.3Multiple cross-site scripting (XSS) vulnerabilities in index.php in the ProofReader (com_proofreader) component 1.0 RC9 and earlier for Joom CVE-2009-41587.5SQL injection vulnerability in the Calendar Base (cal) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary SQL com CVE-2009-41593.5Cross-site scripting (XSS) vulnerability in the newsletter configuration feature in the backend module in the Direct Mail (direct_mail) exte CVE-2009-41605.0Unspecified vulnerability in the Simple download-system with counter and categories (kk_downloader) extension 1.2.1 and earlier for TYPO3 al CVE-2009-41614.3Cross-site scripting (XSS) vulnerability in the [AN] Search it! (an_searchit) extension 2.4.1 and earlier for TYPO3 allows remote attackers CVE-2009-41627.2Unspecified vulnerability in the DB Integration (wfqbe) extension 1.3.1 and earlier for TYPO3 allows local users to execute arbitrary comman