PT-2008-2319 · Ibm · Ibm Db2 Udb

Publicado 2008-02-12 · Atualizado 2018-11-01 · CVE-2008-0699

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM DB2 UDB versions prior to 8.2 Fixpak 16 IBM DB2 UDB versions 9.1 prior to FP4a IBM DB2 UDB versions 9.5 prior to FP1

Description The issue concerns an unspecified vulnerability in the ADMIN SP C procedure, allowing remote authenticated users to execute arbitrary code.

Recommendations For versions prior to 8.2 Fixpak 16, update to at least Fixpak 16. For versions 9.1 prior to FP4a, update to at least FP4a. For versions 9.5 prior to FP1, update to at least FP1.

Correção

Identificadores relacionados

CVE-2008-0699

Produtos afetados

Ibm Db2 Udb

Referências · 12

• http://appsecinc.com/resources/alerts/db2/2008-02.shtml · Nota
• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT · Aviso do Fabricante
• http://osvdb.org/41795 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0699 · Nota de Segurança
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06973 · Aviso do Fabricante
• http://secunia.com/advisories/29784 · Nota
• http://secunia.com/advisories/29022 · Nota
• http://secunia.com/advisories/28771 · Nota
• http://securityfocus.com/archive/1/491075/100/0/threaded · Nota
• http://vupen.com/english/advisories/2008/0401 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ10917 · Aviso do Fabricante
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06972 · Aviso do Fabricante