CVE:CVE-2009-4438
CNNVD:CNNVD-200912-374
IBM DB2中的Query Compiler, Rewrite,和Optimizer组件不能执行访问一个(1)序列或(2) global-variable对象的特权请求,远程验证用户可以借助未明向量使用数据库。
solution:Upgrade ibm db2 to a higher version than 9.1:fp1,9.1:fp2,9.1:fp3,9.1:fp3a,9.1:fp4,9.1:fp4a,9.1:fp5,9.1:fp6,9.1:fp6a,9.1:fp7,9.5:fp1,9.5:fp2,9.5:fp2a,9.5:fp3,9.5:fp3a,9.5:fp3b,9.5:fp4,9.5:fp4a,9.7,and avoid the version 9.1:fp1,9.1:fp2,9.1:fp3,9.1:fp3a,9.1:fp4,9.1:fp4a,9.1:fp5,9.1:fp6,9.1:fp6a,9.1:fp7,9.5:fp1,9.5:fp2,9.5:fp2a,9.5:fp3,9.5:fp3a,9.5:fp3b,9.5:fp4,9.5:fp4a,9.7