8.5

CVE-2008-1998

The NNSTAT (aka SYSPROC.NNSTAT) procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 on Windows allows remote authenticated users to overwrite arbitrary files via the log file parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Db2 Version8.0 Updatefp1
   Microsoft ≫ Windows
Ibm ≫ Db2 Version8.0 Updatefp10
   Microsoft ≫ Windows
Ibm ≫ Db2 Version8.0 Updatefp11
   Microsoft ≫ Windows
Ibm ≫ Db2 Version8.0 Updatefp12
   Microsoft ≫ Windows
Ibm ≫ Db2 Version8.0 Updatefp13
   Microsoft ≫ Windows
Ibm ≫ Db2 Version8.0 Updatefp14
   Microsoft ≫ Windows
Ibm ≫ Db2 Version8.0 Updatefp15
   Microsoft ≫ Windows
Ibm ≫ Db2 Version8.0 Updatefp2
   Microsoft ≫ Windows
Ibm ≫ Db2 Version8.0 Updatefp3
   Microsoft ≫ Windows
Ibm ≫ Db2 Version8.0 Updatefp4
   Microsoft ≫ Windows
Ibm ≫ Db2 Version8.0 Updatefp5
   Microsoft ≫ Windows
Ibm ≫ Db2 Version8.0 Updatefp6
   Microsoft ≫ Windows
Ibm ≫ Db2 Version8.0 Updatefp6a
   Microsoft ≫ Windows
Ibm ≫ Db2 Version8.0 Updatefp6b
   Microsoft ≫ Windows
Ibm ≫ Db2 Version8.0 Updatefp6c
   Microsoft ≫ Windows
Ibm ≫ Db2 Version8.0 Updatefp7
   Microsoft ≫ Windows
Ibm ≫ Db2 Version8.0 Updatefp7a
   Microsoft ≫ Windows
Ibm ≫ Db2 Version8.0 Updatefp7b
   Microsoft ≫ Windows
Ibm ≫ Db2 Version8.0 Updatefp8
   Microsoft ≫ Windows
Ibm ≫ Db2 Version8.0 Updatefp8a
   Microsoft ≫ Windows
Ibm ≫ Db2 Version8.0 Updatefp9
   Microsoft ≫ Windows
Ibm ≫ Db2 Version8.0 Updatefp9a
   Microsoft ≫ Windows
Ibm ≫ Db2 Version9.1 Updatefp1
   Microsoft ≫ Windows
Ibm ≫ Db2 Version9.1 Updatefp2
   Microsoft ≫ Windows
Ibm ≫ Db2 Version9.1 Updatefp3
   Microsoft ≫ Windows
Ibm ≫ Db2 Version9.1 Updatefp3a
   Microsoft ≫ Windows
Ibm ≫ Db2 Version9.1 Updatefp4
   Microsoft ≫ Windows
Ibm ≫ Db2 Version9.5
   Microsoft ≫ Windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.5% 0.826
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.5 6.8 10
AV:N/AC:M/Au:S/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/29022
Third Party Advisory
http://secunia.com/advisories/29784
Third Party Advisory
http://securityreason.com/securityalert/3840
Third Party Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06976
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06977
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ10776
Vendor Advisory
http://www.appsecinc.com/resources/alerts/db2/2008-03.shtml
Third Party Advisory
http://www.securityfocus.com/archive/1/491073/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/28836
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/41960
Third Party Advisory
VDB Entry