Vulnerability Details : CVE-2009-4150
dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors.
Products affected by CVE-2009-4150
- cpe:2.3:a:ibm:db2_universal_database:8:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp1:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp3:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp2:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp4:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp4a:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp6a:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp6b:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp6c:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp6b:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp6c:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp7:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp7:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp7b:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp8:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp8a:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp9:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp9a:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp10:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp3:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp2:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp4a:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp4:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp5:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp5:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp6b:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp6c:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp6b:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp6c:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp7a:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp7a:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp8:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp8a:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp9a:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp9:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp10:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp11:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp13:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp13:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp14:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp15:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp1:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp1:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp2:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp3:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp4:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp4:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp5:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp6:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp6a:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp3:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp2:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp4a:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp4a:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp5:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp6:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp6:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp6a:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp7:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp7:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp7b:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp7b:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp7b:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp8a:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp8a:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp9a:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp9:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp11:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp11:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp11:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp13:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp13:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp14:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp15:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp12:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp12:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp14:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp15:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp6:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp6a:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp7a:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp7a:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp8:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp8:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp9a:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp9:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp10:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp10:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp12:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp12:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp14:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp15:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp16:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp16:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp16:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:8:fp16:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2:9.1:fp6a:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2:9.1:fp7:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*
Threat overview for CVE-2009-4150
Top countries where our scanners detected CVE-2009-4150
Top open port discovered on systems with this issue
523
IPs affected by CVE-2009-4150 41
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2009-4150!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2009-4150
0.11%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 26 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2009-4150
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.6
|
MEDIUM | AV:L/AC:L/Au:N/C:P/I:P/A:P |
3.9
|
6.4
|
NIST |
CWE ids for CVE-2009-4150
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2009-4150
-
http://securitytracker.com/id?1023242
-
http://www-01.ibm.com/support/docview.wss?uid=swg21386689
Patch;Vendor Advisory
-
http://www-01.ibm.com/support/docview.wss?uid=swg1IC64759
-
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40343
-
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40352
-
http://secunia.com/advisories/36890
Vendor Advisory
-
http://www-01.ibm.com/support/docview.wss?uid=swg21403619
Patch;Vendor Advisory
-
http://www.vupen.com/english/advisories/2009/3340
Vendor Advisory
-
http://secunia.com/advisories/37454
Vendor Advisory
-
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40340
Jump to