CVE-2008-3853

EPSS 5.77%
Veröffentlicht 28.08.2008 17:41:00
Zuletzt bearbeitet 16.06.2026 22:56:40
Erkennungen
Login

Buffer overflow in the DAS server program in the Core DAS function component in IBM DB2 9.1 before FP4a and 9.5 before FP1 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via unspecified vectors. NOTE: this might be related to CVE-2007-3676.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 10

NVD 16 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Db2 Universal Database Version 9.1 Edition aix

Ibm ≫ Db2 Universal Database Version 9.1 Edition hp_ux

Ibm ≫ Db2 Universal Database Version 9.1 Edition linux

Ibm ≫ Db2 Universal Database Version 9.1 Edition solaris

Ibm ≫ Db2 Universal Database Version 9.1 Update fp2 Edition aix

Ibm ≫ Db2 Universal Database Version 9.1 Update fp2 Edition hp-ux

Ibm ≫ Db2 Universal Database Version 9.1 Update fp2 Edition linux

Ibm ≫ Db2 Universal Database Version 9.1 Update fp2 Edition solaris

Ibm ≫ Db2 Universal Database Version 9.1 Update fp3 Edition aix

Ibm ≫ Db2 Universal Database Version 9.1 Update fp3 Edition hp-ux

Ibm ≫ Db2 Universal Database Version 9.1 Update fp3 Edition linux

Ibm ≫ Db2 Universal Database Version 9.1 Update fp3 Edition solaris

Ibm ≫ Db2 Universal Database Version 9.1 Update fp4 Edition aix

Ibm ≫ Db2 Universal Database Version 9.1 Update fp4 Edition hp-ux

Ibm ≫ Db2 Universal Database Version 9.1 Update fp4 Edition linux

Ibm ≫ Db2 Universal Database Version 9.1 Update fp4 Edition solaris

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	5.77%	0.921

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www-1.ibm.com/support/docview.wss?uid=swg21255607

Patch

http://secunia.com/advisories/29784

http://www.securityfocus.com/bid/29601

Patch

ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT

http://www-01.ibm.com/support/docview.wss?uid=swg1IZ12406

http://www-1.ibm.com/support/docview.wss?uid=swg1IZ12379

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/45141

https://nvd.nist.gov/vuln/detail/CVE-2008-3853

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-3853

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-3853

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-3853