9

CVE-2008-0699

Unspecified vulnerability in the ADMIN_SP_C procedure (SYSPROC.ADMIN_SP_C) in IBM DB2 UDB before 8.2 Fixpak 16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unspecified attack vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Db2 Version 8.2 Update fp1
Ibm ≫ Db2 Version 8.2 Update fp10
Ibm ≫ Db2 Version 8.2 Update fp11
Ibm ≫ Db2 Version 8.2 Update fp12
Ibm ≫ Db2 Version 8.2 Update fp13
Ibm ≫ Db2 Version 8.2 Update fp14
Ibm ≫ Db2 Version 8.2 Update fp15
Ibm ≫ Db2 Version 8.2 Update fp16
Ibm ≫ Db2 Version 8.2 Update fp2
Ibm ≫ Db2 Version 8.2 Update fp3
Ibm ≫ Db2 Version 8.2 Update fp4
Ibm ≫ Db2 Version 8.2 Update fp5
Ibm ≫ Db2 Version 8.2 Update fp6
Ibm ≫ Db2 Version 8.2 Update fp7
Ibm ≫ Db2 Version 8.2 Update fp8
Ibm ≫ Db2 Version 8.2 Update fp9
Ibm ≫ Db2 Version 9.1
Ibm ≫ Db2 Version 9.1 Update fp1
Ibm ≫ Db2 Version 9.1 Update fp2
Ibm ≫ Db2 Version 9.1 Update fp2a
Ibm ≫ Db2 Version 9.1 Update fp3
Ibm ≫ Db2 Version 9.1 Update fp3a
Ibm ≫ Db2 Version 9.1 Update fp4
Ibm ≫ Db2 Version 9.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.2% 0.914
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT
Vendor Advisory
http://secunia.com/advisories/28771
Third Party Advisory
http://www.vupen.com/english/advisories/2008/0401
Third Party Advisory
http://osvdb.org/41795
Broken Link
http://secunia.com/advisories/29022
Third Party Advisory
http://secunia.com/advisories/29784
Third Party Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06972
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06973
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ10917
Patch
Vendor Advisory
http://www.appsecinc.com/resources/alerts/db2/2008-02.shtml
Third Party Advisory
http://www.securityfocus.com/archive/1/491075/100/0/threaded
Third Party Advisory
VDB Entry