« Volver al listado

CVE-2010-3739

Estado: ModificadaMedia (6.4)—

The audit facility in the Security component in IBM DB2 UDB 9.5 before FP6a uses instance-level audit settings to capture connection (aka CONNECT and AUTHENTICATION) events in certain circumstances in which database-level audit settings were intended, which might make it easier for remote attackers to connect without discovery.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — DB2 Universal Database

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-3739",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-10-05T18:00:33.487",
  "references": [
    {
      "url": "ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1JR34218",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1JR34218",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The audit facility in the Security component in IBM DB2 UDB 9.5 before FP6a uses instance-level audit settings to capture connection (aka CONNECT and AUTHENTICATION) events in certain circumstances in which database-level audit settings were intended, which might make it easier for remote attackers to connect without discovery."
    },
    {
      "lang": "es",
      "value": "La característica de auditoría en el componente de seguridad de IBM DB2 UDB v9.5 antes de FP6a utiliza la configuración de auditoría a nivel de instancia para capturar los eventos de conexión (también conocidos como CONNECT y AUTHENTICATION) en determinadas circunstancias, lo que podría hacer más fácil a atacantes remotos a la hora de conectarse sin ser descubiertos."
    }
  ],
  "lastModified": "2026-06-16T23:23:25.827",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:db2_universal_database:*:fp6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1981C2E5-E186-48A7-B977-7FB8A7DBB6EE",
              "versionEndIncluding": "9.5"
            },
            {
              "criteria": "cpe:2.3:a:ibm:db2_universal_database:9.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F01421A6-B4B4-4F86-87D3-B11AEC1258CC"
            },
            {
              "criteria": "cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B561679-68AF-4586-919A-83D47195F9FC"
            },
            {
              "criteria": "cpe:2.3:a:ibm:db2_universal_database:9.5:fp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D66FF5FC-E01A-4DE9-B344-FA20941C806B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:db2_universal_database:9.5:fp2a:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "430BE300-8260-4966-A282-B69C67B6511C"
            },
            {
              "criteria": "cpe:2.3:a:ibm:db2_universal_database:9.5:fp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "83FB7558-610A-4218-A347-74E1BF4509CA"
            },
            {
              "criteria": "cpe:2.3:a:ibm:db2_universal_database:9.5:fp3a:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DCA815B1-EF9D-4F43-A51E-2E808FE124C8"
            },
            {
              "criteria": "cpe:2.3:a:ibm:db2_universal_database:9.5:fp3b:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F4EB46DD-C3DF-4509-9B2E-AFEF7F3EA0D8"
            },
            {
              "criteria": "cpe:2.3:a:ibm:db2_universal_database:9.5:fp4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ECF24F65-D158-4627-8E0C-C700CCF803D7"
            },
            {
              "criteria": "cpe:2.3:a:ibm:db2_universal_database:9.5:fp4a:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0445F99B-1AC4-43CE-85EF-7F0BC1AA093D"
            },
            {
              "criteria": "cpe:2.3:a:ibm:db2_universal_database:9.5:fp5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "61533220-2A4F-4BEE-A6BA-27AF0CB2998E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}