9

CVE-2008-0699

Unspecified vulnerability in the ADMIN_SP_C procedure (SYSPROC.ADMIN_SP_C) in IBM DB2 UDB before 8.2 Fixpak 16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unspecified attack vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Db2 Version8.2 Updatefp1
Ibm ≫ Db2 Version8.2 Updatefp10
Ibm ≫ Db2 Version8.2 Updatefp11
Ibm ≫ Db2 Version8.2 Updatefp12
Ibm ≫ Db2 Version8.2 Updatefp13
Ibm ≫ Db2 Version8.2 Updatefp14
Ibm ≫ Db2 Version8.2 Updatefp15
Ibm ≫ Db2 Version8.2 Updatefp16
Ibm ≫ Db2 Version8.2 Updatefp2
Ibm ≫ Db2 Version8.2 Updatefp3
Ibm ≫ Db2 Version8.2 Updatefp4
Ibm ≫ Db2 Version8.2 Updatefp5
Ibm ≫ Db2 Version8.2 Updatefp6
Ibm ≫ Db2 Version8.2 Updatefp7
Ibm ≫ Db2 Version8.2 Updatefp8
Ibm ≫ Db2 Version8.2 Updatefp9
Ibm ≫ Db2 Version9.1
Ibm ≫ Db2 Version9.1 Updatefp1
Ibm ≫ Db2 Version9.1 Updatefp2
Ibm ≫ Db2 Version9.1 Updatefp2a
Ibm ≫ Db2 Version9.1 Updatefp3
Ibm ≫ Db2 Version9.1 Updatefp3a
Ibm ≫ Db2 Version9.1 Updatefp4
Ibm ≫ Db2 Version9.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.2% 0.914
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT
Vendor Advisory
http://secunia.com/advisories/28771
Third Party Advisory
http://www.vupen.com/english/advisories/2008/0401
Third Party Advisory
http://osvdb.org/41795
Broken Link
http://secunia.com/advisories/29022
Third Party Advisory
http://secunia.com/advisories/29784
Third Party Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06972
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06973
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ10917
Patch
Vendor Advisory
http://www.appsecinc.com/resources/alerts/db2/2008-02.shtml
Third Party Advisory
http://www.securityfocus.com/archive/1/491075/100/0/threaded
Third Party Advisory
VDB Entry