{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2012-03-16T00:00:00", "descriptions": [{"lang": "en", "value": "IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 does not properly check variables, which allows remote authenticated users to bypass intended restrictions on viewing table data by leveraging the CREATEIN privilege to execute crafted SQL CREATE VARIABLE statements."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-09-18T12:57:01", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"name": "IC81387", "tags": ["vendor-advisory", "x_refsource_AIXAPAR"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC81387"}, {"name": "IC81390", "tags": ["vendor-advisory", "x_refsource_AIXAPAR"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC81390"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21588100"}, {"name": "IC81836", "tags": ["vendor-advisory", "x_refsource_AIXAPAR"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC81836"}, {"name": "db2-createvariable-security-bypass(73493)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/73493"}, {"name": "oval:org.mitre.oval:def:15004", "tags": ["vdb-entry", "signature", "x_refsource_OVAL"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15004"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "ID": "CVE-2012-0709", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 does not properly check variables, which allows remote authenticated users to bypass intended restrictions on viewing table data by leveraging the CREATEIN privilege to execute crafted SQL CREATE VARIABLE statements."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "IC81387", "refsource": "AIXAPAR", "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC81387"}, {"name": "IC81390", "refsource": "AIXAPAR", "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC81390"}, {"name": "http://www-01.ibm.com/support/docview.wss?uid=swg21588100", "refsource": "CONFIRM", "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21588100"}, {"name": "IC81836", "refsource": "AIXAPAR", "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC81836"}, {"name": "db2-createvariable-security-bypass(73493)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/73493"}, {"name": "oval:org.mitre.oval:def:15004", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15004"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T18:30:54.020Z"}, "title": "CVE Program Container", "references": [{"name": "IC81387", "tags": ["vendor-advisory", "x_refsource_AIXAPAR", "x_transferred"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC81387"}, {"name": "IC81390", "tags": ["vendor-advisory", "x_refsource_AIXAPAR", "x_transferred"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC81390"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21588100"}, {"name": "IC81836", "tags": ["vendor-advisory", "x_refsource_AIXAPAR", "x_transferred"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC81836"}, {"name": "db2-createvariable-security-bypass(73493)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/73493"}, {"name": "oval:org.mitre.oval:def:15004", "tags": ["vdb-entry", "signature", "x_refsource_OVAL", "x_transferred"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15004"}]}]}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2012-0709", "datePublished": "2012-03-20T20:00:00", "dateReserved": "2012-01-17T00:00:00", "dateUpdated": "2024-08-06T18:30:54.020Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*", "matchCriteriaId": "11ABF7CC-2FA5-4F2D-901A-2D0EF5B8E717", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*", "matchCriteriaId": "58147402-53D5-4F15-862B-EE3DCCD75E2C", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*", "matchCriteriaId": "D3F3CB5E-D4FB-4C03-B108-06CC358B1F45", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*", "matchCriteriaId": "CB2EA14A-878A-4D8D-B17A-568712D21C48", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*", "matchCriteriaId": "84C925CD-E753-401F-9EC0-6E3D9861C818", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*", "matchCriteriaId": "651D042C-A9F1-42D1-A6DD-95ADBCD08448", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*", "matchCriteriaId": "0A589323-B8B8-4CB4-B1A9-B9E771C99123", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp4:*:*:*:*:*:*", "matchCriteriaId": "61252AF9-A231-442A-A473-BA0608323BF2", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp4a:*:*:*:*:*:*", "matchCriteriaId": "EB37A1AA-58F0-4A39-8E38-C70692CE67BF", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp5:*:*:*:*:*:*", "matchCriteriaId": "1D9D5B5B-8E23-4987-9BBE-8FE1F27CB1B5", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp6:*:*:*:*:*:*", "matchCriteriaId": "E3E12C63-19FF-4BB9-9389-BF5E6B493F42", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp6a:*:*:*:*:*:*", "matchCriteriaId": "10456C00-127D-46FE-82A4-D567AB19F87A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp7:*:*:*:*:*:*", "matchCriteriaId": "E476599E-7087-4442-AED5-61DC1CA1F374", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp8:*:*:*:*:*:*", "matchCriteriaId": "93F5745A-219B-48F6-95E9-85B4E516FA94", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*", "matchCriteriaId": "CE1C4DE6-EB32-4A31-9FAA-D8DA31D8CF05", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.7:fp1:*:*:*:*:*:*", "matchCriteriaId": "00A16349-5CF1-4E75-A6EE-218E85049F62", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.7:fp2:*:*:*:*:*:*", "matchCriteriaId": "5335C017-52D9-45D4-BCEB-CBB51B7C88AE", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.7:fp3:*:*:*:*:*:*", "matchCriteriaId": "786B3F51-46A3-4A4C-A549-B80BA27EE3B9", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.7:fp3a:*:*:*:*:*:*", "matchCriteriaId": "AB349DC8-2EC6-4A11-9BCD-9C49D36BA49D", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.7:fp4:*:*:*:*:*:*", "matchCriteriaId": "CC8D88E5-7942-4F21-B0BA-7D23F4537117", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.7:fp5:*:*:*:*:*:*", "matchCriteriaId": "D7A42A22-D615-4D60-8FC4-61CDF727FD54", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.8:*:*:*:*:*:*:*", "matchCriteriaId": "D72D43DB-9A92-4E12-853B-F5FC9421D5EA", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.8:fp3:*:*:*:*:*:*", "matchCriteriaId": "601CABF7-997C-4828-9292-99FFBF603F3A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.8:fp4:*:*:*:*:*:*", "matchCriteriaId": "B5133944-390D-4CEF-86EB-587A5D27F940", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 does not properly check variables, which allows remote authenticated users to bypass intended restrictions on viewing table data by leveraging the CREATEIN privilege to execute crafted SQL CREATE VARIABLE statements."}, {"lang": "es", "value": "IBM DB2 v9.5 anteriores a vFP9, v9.7 hasta vFP5, y v9.8 hasta vFP4 no comprueban las variables de forma adecuada, lo que permite a usuarios remotos autenticados evitar las restricciones de visionado de datos de tablas, mediante la elevaci\u00f3n del privilegio CREATEIN al ejecutar sentencias SQL CREATE VARIABLE manipuladas."}], "id": "CVE-2012-0709", "lastModified": "2017-09-19T01:34:42.337", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2012-03-20T20:55:01.147", "references": [{"source": "psirt@us.ibm.com", "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC81387"}, {"source": "psirt@us.ibm.com", "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC81390"}, {"source": "psirt@us.ibm.com", "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC81836"}, {"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21588100"}, {"source": "psirt@us.ibm.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/73493"}, {"source": "psirt@us.ibm.com", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15004"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}