CVE-2010-3194

The DB2DART program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows attackers to bypass intended file access restrictions via unspecified vectors related to overwriting files owned by an instance owner.

• CWE-264

• ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT
• http://secunia.com/advisories/41218Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC65749
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC65756Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC65762Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21426108Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21432298Vendor Advisory
• http://www.vupen.com/english/advisories/2010/2225Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61445
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13841
• ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT
• http://secunia.com/advisories/41218Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC65749
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC65756Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC65762Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21426108Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21432298Vendor Advisory
• http://www.vupen.com/english/advisories/2010/2225Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61445
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13841

Published

Aug 31, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-3188SQL injection vulnerability in search.aspx in BugTracker.NET…
• CVE-2010-3189The extSetOwner function in the UfProxyBrowserCtrl ActiveX c…
• CVE-2010-3190Untrusted search path vulnerability in the Microsoft Foundat…7.8
• CVE-2010-3191Untrusted search path vulnerability in Adobe Captivate 5.0.0…
• CVE-2010-3192Certain run-time memory protection mechanisms in the GNU C L…
• CVE-2010-3193Unspecified vulnerability in the DB2STST program in IBM DB2 …
• CVE-2010-3195Unspecified vulnerability in IBM DB2 9.1 before FP9, 9.5 bef…
• CVE-2010-3196IBM DB2 9.7 before FP2, when AUTO_REVAL is IMMEDIATE, allows…
• CVE-2010-3197IBM DB2 9.7 before FP2 does not perform the expected access …
• CVE-2010-3198ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11…
• CVE-2010-3199Untrusted search path vulnerability in TortoiseSVN 1.6.10, B…
• CVE-2010-3200MSO.dll in Microsoft Word 2003 SP3 11.8326.11.8324 allows re…