PT-2008-2318 · Ibm · Ibm Db2 Udb

Published 2008-02-12 · Updated 2011-03-08 · CVE-2008-0698

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM DB2 UDB versions prior to 8.2 Fixpak 16

Description The issue involves a buffer overflow in the DAS server, which may lead to invalid memory access.

Recommendations For versions prior to 8.2 Fixpak 16, update to at least 8.2 Fixpak 16 to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-0698

Affected Products

Ibm Db2 Udb

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2008-0698 · Security Note
• http://secunia.com/advisories/28771 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ05496 · Vendor Advisory
• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT · Note
• http://vupen.com/english/advisories/2008/0401 · Note
• http://securityfocus.com/bid/27681 · Note