CVE-2013-6744
Last modified
CVE-2013-6744 is a vulnerability of currently unknown severity. The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote authenticated users to gain privileges by leveraging the CONNECT privilege and the CREATE_EXTERNAL_ROUTINE authority.. EPSS estimates a 2.73% chance of exploitation in the next 30 days.
Description
The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote authenticated users to gain privileges by leveraging the CONNECT privilege and the CREATE_EXTERNAL_ROUTINE authority.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Db2 | 9.5 |
| Ibm | Db2 | 9.7 |
| Ibm | Db2 | 9.7.0.1 |
| Ibm | Db2 | 9.7.0.2 |
| Ibm | Db2 | 9.7.0.3 |
| Ibm | Db2 | 9.7.0.4 |
| Ibm | Db2 | 9.7.0.5 |
| Ibm | Db2 | 9.7.0.6 |
| Ibm | Db2 | 9.7.0.7 |
| Ibm | Db2 | 9.7.0.8 |
| Ibm | Db2 | 9.7.0.9 |
| Ibm | Db2 | 10.1 |
| Ibm | Db2 | 10.1.0.1 |
| Ibm | Db2 | 10.1.0.2 |
| Ibm | Db2 | 10.1.0.3 |
| Ibm | Db2 | 10.5 |
| Ibm | Db2 | 10.5.0.1 |
| Ibm | Db2 | 10.5.0.2 |
References
- http://www.ibm.com/support/docview.wss?uid=swg1IC99480Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg1IC99480Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-6744?
How severe is CVE-2013-6744?
How do I fix CVE-2013-6744?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-6737IBM System Storage Storwize V7000 Unified 1.3.x and 1.4.x be…
- CVE-2013-6738Cross-site scripting (XSS) vulnerability in IBM SmartCloud A…
- CVE-2013-6739IBM SPSS Modeler before 16 on UNIX allows remote authenticat…
- CVE-2013-6741IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.2014031…
- CVE-2013-6742The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and…
- CVE-2013-6743Cross-site scripting (XSS) vulnerability in the Meeting Serv…
- CVE-2013-6745Cross-site scripting (XSS) vulnerability in the IMS server b…
- CVE-2013-6746Cross-site scripting (XSS) vulnerability in FileNet P8 Platf…
- CVE-2013-6747IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as u…
- CVE-2013-6748Buffer overflow in the ActiveX control in qp2.cab in IBM Lot…
- CVE-2013-6749Buffer overflow in the ActiveX control in qp2.cab in IBM Lot…
- CVE-2013-6751Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
Are you affected by CVE-2013-6744?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST