PT-2008-2319 · Ibm · Ibm Db2 Udb

Published 2008-02-12 · Updated 2018-11-01 · CVE-2008-0699

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM DB2 UDB versions prior to 8.2 Fixpak 16 IBM DB2 UDB versions 9.1 prior to FP4a IBM DB2 UDB versions 9.5 prior to FP1

Description The issue concerns an unspecified vulnerability in the ADMIN SP C procedure, allowing remote authenticated users to execute arbitrary code.

Recommendations For versions prior to 8.2 Fixpak 16, update to at least Fixpak 16. For versions 9.1 prior to FP4a, update to at least FP4a. For versions 9.5 prior to FP1, update to at least FP1.

Fix

Related Identifiers

CVE-2008-0699

Affected Products

Ibm Db2 Udb

References · 12

• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0699 · Security Note
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06973 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ10917 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06972 · Vendor Advisory
• http://appsecinc.com/resources/alerts/db2/2008-02.shtml · Note
• http://osvdb.org/41795 · Note
• http://secunia.com/advisories/29784 · Note
• http://secunia.com/advisories/29022 · Note
• http://secunia.com/advisories/28771 · Note
• http://securityfocus.com/archive/1/491075/100/0/threaded · Note
• http://vupen.com/english/advisories/2008/0401 · Note