CVE-2007-4417 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-4417
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-4417

Description: IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 does not properly revoke privileges on methods, which allows remote authenticated users to execute a method after revocation until the routine auth cache is flushed.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/36108 VIM http://www.attrition.org/pipermail/vim/2007-August/001765.html SAID Secunia Advisory: SA26471 MLIST http://www.attrition.org/pipermail/vim/2007-August/001765.html CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg21255607 http://www-1.ibm.com/support/docview.wss?uid=swg21255352 BID 25339 AIXAPAR http://www-1.ibm.com/support/docview.wss?uid=swg1IY88226 http://www-1.ibm.com/support/docview.wss?uid=swg1IY88158

Return to the previous page.