Database Journal
MS SQL Oracle DB2 Access MySQL PostgreSQL Sybase PHP SQL Etc SQL Scripts & Samples Tips Database Forum Rss Feed

» Database Journal Home
» Database Articles
» Database Tutorials
MS Access
SQL Scripts & Samples
» Database Forum
» Slideshows
Free Newsletters:

News Via RSS Feed

Rss Feed

Database Journal |DBA Support |SQLCourse |SQLCourse2

Featured Database Articles

Database News

Posted Jun 24, 2005

IBM DB2 Universal Database Local Privilege Escalation Vulnerability

By DatabaseJournal.com Staff

[From FrSIRT]

A vulnerability was identified in IBM DB2 Universal Database, which could be exploited by local attackers to obtain elevated privileges. This flaw is due to an error when verifying the privilege level of users, which could be exploited by malicious users, with "SELECT" privilege, to insert, update or delete the contents of certain tables, even if they do not hold the required insert, update and/or delete privileges.

The article continues at http://www.frsirt.com/english/advisories/2005/0876

Database News Archives

Latest Forum Threads
Database News Forum
Topic By Replies Updated
Efficient SQL Server Indexing by Design lcole 0 April 30th, 12:38 PM
Mine Oracle Database, SQL Server and Other Databases with Monarch Data Pump Pro V10.5 lcole 0 April 30th, 12:37 PM
Oracle Database and Oracle Fusion Middleware for Private Social Network Application lcole 0 April 30th, 12:31 PM
Oracle Database Maintains a Stronghold in the DBMS Market lcole 0 April 30th, 12:30 PM