CVE-2010-3194

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The DB2DART program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows attackers to bypass intended file access restrictions via unspecified vectors related to overwriting files owned by an instance owner.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/41218Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IC65749
http://www-01.ibm.com/support/docview.wss?uid=swg1IC65756Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IC65762Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21426108Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21432298Vendor Advisory
http://www.vupen.com/english/advisories/2010/2225Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/61445
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13841
http://secunia.com/advisories/41218Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IC65749
http://www-01.ibm.com/support/docview.wss?uid=swg1IC65756Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IC65762Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21426108Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21432298Vendor Advisory
http://www.vupen.com/english/advisories/2010/2225Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/61445
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13841

Timeline

Published: Aug 31, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-31955.0Unspecified vulnerability in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 on Windows Server 2008 allows attackers to cause a d CVE-2010-31963.5IBM DB2 9.7 before FP2, when AUTO_REVAL is IMMEDIATE, allows remote authenticated users to cause a denial of service (loss of privileges) to CVE-2010-31975.0IBM DB2 9.7 before FP2 does not perform the expected access control on the monitor administrative views in the SYSIBMADM schema, which allow CVE-2010-31984.3ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads CVE-2010-31999.3Untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier allows local users, and possibly remote attackers, to exe CVE-2010-32004.3MSO.dll in Microsoft Word 2003 SP3 11.8326.11.8324 allows remote attackers to cause a denial of service (NULL pointer dereference and multip CVE-2010-32014.3Cross-site scripting (XSS) vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via CVE-2010-32024.3Cross-site scripting (XSS) vulnerability in Flock Browser 3.0.0.3989 allows remote attackers to inject arbitrary web script or HTML via a cr CVE-2010-32035.0Directory traversal vulnerability in the PicSell (com_picsell) component 1.0 for Joomla! allows remote attackers to read arbitrary files via CVE-2010-32047.5Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arbitrary PHP code via a URL in the CVE-2010-32057.5PHP remote file inclusion vulnerability in index.php in Textpattern CMS 4.2.0 allows remote attackers to execute arbitrary PHP code via a UR CVE-2010-32067.5Multiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1)