IBM DB2 UDB before 8.2 Fixpak 16 does not properly check authorization for the ALTER TABLE statement, which has unknown impact and attack vectors.Referencesftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXThttp://secunia.com/advisories/28771http://www.vupen.com/english/advisories/2008/0401http://www-1.ibm.com/support/docview.wss?uid=swg1IZ07337
