PT-2008-5903 · Ibm+1 · Ibm Db2+1

Publicado 2008-10-22 · Atualizado 2017-08-08 · CVE-2008-4692

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 8.0 through 8.0 FP16 IBM DB2 versions 9.1 through 9.1 FP5 IBM DB2 versions 9.5 through 9.5 FP1

Description The issue concerns the Native Managed Provider for .NET component in IBM DB2. When a definer cannot maintain objects, it preserves views and triggers without marking them inoperative or dropping them. The impact and attack vectors of this issue are not specified.

Recommendations For IBM DB2 version 8.0 through 8.0 FP16, update to FP17 or later. For IBM DB2 version 9.1 through 9.1 FP5, update to FP6 or later. For IBM DB2 version 9.5 through 9.5 FP1, update to FP2 or later.

Correção

Identificadores relacionados

CVE-2008-4692

Produtos afetados

.Net Framework

Ibm Db2

Referências · 10

• http://secunia.com/advisories/31787 · Nota
• http://vupen.com/english/advisories/2008/2893 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22287 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22307 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22306 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg27013892 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4692 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46021 · Nota
• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT · Nota
• http://secunia.com/advisories/32368 · Aviso do Fabricante