PT-2008-5195 · Ibm · Ibm Db2

Publicado 2008-08-28 · Atualizado 2017-08-08 · CVE-2008-3853

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.1 before FP4a IBM DB2 versions 9.5 before FP1

Description A buffer overflow issue exists in the DAS server program within the Core DAS function component. This allows remote attackers to potentially execute arbitrary code or cause a denial of service, resulting in a daemon crash, via unspecified vectors.

Recommendations For IBM DB2 version 9.1, update to FP4a or later to resolve the issue. For IBM DB2 version 9.5, update to FP1 or later to resolve the issue.

Correção

RCE

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-3853

Produtos afetados

Ibm Db2

Referências · 8

• http://www-1.ibm.com/support/docview.wss?uid=swg21255607 · Correção
• http://securityfocus.com/bid/29601 · Correção
• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT · Nota
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ12379 · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-3853 · Nota de Segurança
• http://secunia.com/advisories/29784 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ12406 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45141 · Nota