4

CVE-2006-4257

IBM DB2 Universal Database (UDB) before 8.1 FixPak 13 allows remote authenticated users to cause a denial of service (crash) by (1) sending the first ACCSEC command without an RDBNAM parameter during the CONNECT process, or (2) sending crafted SQLJRA packet, which results in a null dereference.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Db2 Version 8.0 Edition aix
Ibm ≫ Db2 Version 8.0 Edition linux
Ibm ≫ Db2 Version 8.0 Edition os_390
Ibm ≫ Db2 Version 8.1 Edition aix
Ibm ≫ Db2 Version 8.1 Edition hp_ux
Ibm ≫ Db2 Version 8.1 Edition linux
Ibm ≫ Db2 Version 8.1 Edition solaris
Ibm ≫ Db2 Version 8.1 Edition windows
Ibm ≫ Db2 Version 8.1.4 Edition aix
Ibm ≫ Db2 Version 8.1.4 Edition hp_ux
Ibm ≫ Db2 Version 8.1.4 Edition linux
Ibm ≫ Db2 Version 8.1.4 Edition solaris
Ibm ≫ Db2 Version 8.1.4 Edition windows
Ibm ≫ Db2 Version 8.1.5 Edition aix
Ibm ≫ Db2 Version 8.1.5 Edition hp_ux
Ibm ≫ Db2 Version 8.1.5 Edition linux
Ibm ≫ Db2 Version 8.1.5 Edition solaris
Ibm ≫ Db2 Version 8.1.5 Edition windows
Ibm ≫ Db2 Version 8.1.6 Edition aix
Ibm ≫ Db2 Version 8.1.6 Edition hp_ux
Ibm ≫ Db2 Version 8.1.6 Edition linux
Ibm ≫ Db2 Version 8.1.6 Edition solaris
Ibm ≫ Db2 Version 8.1.6 Edition windows
Ibm ≫ Db2 Version 8.1.6c Edition aix
Ibm ≫ Db2 Version 8.1.6c Edition hp_ux
Ibm ≫ Db2 Version 8.1.6c Edition linux
Ibm ≫ Db2 Version 8.1.6c Edition solaris
Ibm ≫ Db2 Version 8.1.6c Edition windows
Ibm ≫ Db2 Version 8.1.7 Edition aix
Ibm ≫ Db2 Version 8.1.7 Edition hp_ux
Ibm ≫ Db2 Version 8.1.7 Edition linux
Ibm ≫ Db2 Version 8.1.7 Edition solaris
Ibm ≫ Db2 Version 8.1.7 Edition windows
Ibm ≫ Db2 Version 8.1.7b Edition aix
Ibm ≫ Db2 Version 8.1.7b Edition hp_ux
Ibm ≫ Db2 Version 8.1.7b Edition linux
Ibm ≫ Db2 Version 8.1.7b Edition solaris
Ibm ≫ Db2 Version 8.1.7b Edition windows
Ibm ≫ Db2 Version 8.1.8 Edition aix
Ibm ≫ Db2 Version 8.1.8 Edition hp_ux
Ibm ≫ Db2 Version 8.1.8 Edition linux
Ibm ≫ Db2 Version 8.1.8 Edition solaris
Ibm ≫ Db2 Version 8.1.8 Edition windows
Ibm ≫ Db2 Version 8.1.8a Edition aix
Ibm ≫ Db2 Version 8.1.8a Edition hp_ux
Ibm ≫ Db2 Version 8.1.8a Edition linux
Ibm ≫ Db2 Version 8.1.8a Edition solaris
Ibm ≫ Db2 Version 8.1.8a Edition windows
Ibm ≫ Db2 Version 8.1.9 Edition aix
Ibm ≫ Db2 Version 8.1.9 Edition hp_ux
Ibm ≫ Db2 Version 8.1.9 Edition linux
Ibm ≫ Db2 Version 8.1.9 Edition solaris
Ibm ≫ Db2 Version 8.1.9 Edition windows
Ibm ≫ Db2 Version 8.1.9a Edition aix
Ibm ≫ Db2 Version 8.1.9a Edition hp_ux
Ibm ≫ Db2 Version 8.1.9a Edition linux
Ibm ≫ Db2 Version 8.1.9a Edition solaris
Ibm ≫ Db2 Version 8.1.9a Edition windows
Ibm ≫ Db2 Version 8.2 Edition linux
Ibm ≫ Db2 Version 8.10 Edition linux
Ibm ≫ Db2 Version 8.10 Edition solaris
Ibm ≫ Db2 Version 8.10 Edition windows
Ibm ≫ Db2 Version 8.12 Edition linux
Ibm ≫ Db2 Version 8.12 Edition solaris
Ibm ≫ Db2 Version 8.12 Edition windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.13% 0.799
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT
http://secunia.com/advisories/21550
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg24013114
Patch
http://www.appsecinc.com/resources/alerts/db2/2006-09-05.shtml
http://www.securityfocus.com/archive/1/445298/100/0/threaded
http://www.securityfocus.com/archive/1/454307/100/0/threaded
http://www.securityfocus.com/bid/19586
http://www.vupen.com/english/advisories/2006/3328
Vendor Advisory