PT-2008-5903 · Ibm+1 · Ibm Db2+1

Published 2008-10-22 · Updated 2017-08-08 · CVE-2008-4692

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 8.0 through 8.0 FP16 IBM DB2 versions 9.1 through 9.1 FP5 IBM DB2 versions 9.5 through 9.5 FP1

Description The issue concerns the Native Managed Provider for .NET component in IBM DB2. When a definer cannot maintain objects, it preserves views and triggers without marking them inoperative or dropping them. The impact and attack vectors of this issue are not specified.

Recommendations For IBM DB2 version 8.0 through 8.0 FP16, update to FP17 or later. For IBM DB2 version 9.1 through 9.1 FP5, update to FP6 or later. For IBM DB2 version 9.5 through 9.5 FP1, update to FP2 or later.

Fix

Related Identifiers

CVE-2008-4692

Affected Products

.Net Framework

Ibm Db2

References · 10

• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22287 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22307 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22306 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-4692 · Security Note
• http://secunia.com/advisories/32368 · Vendor Advisory
• http://secunia.com/advisories/31787 · Note
• http://vupen.com/english/advisories/2008/2893 · Note
• http://www-01.ibm.com/support/docview.wss?uid=swg27013892 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46021 · Note
• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT · Note