5

CVE-2008-3960

Unspecified vulnerability in the JDBC Applet Server Service (aka db2jds) in IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service (service crash) via "malicious packets."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Db2 Universal Database Update fp16 Version <= 8.2
Ibm ≫ Db2 Universal Database Version 8.2
Ibm ≫ Db2 Universal Database Version 8.2 Update fp1
Ibm ≫ Db2 Universal Database Version 8.2 Update fp10
Ibm ≫ Db2 Universal Database Version 8.2 Update fp11
Ibm ≫ Db2 Universal Database Version 8.2 Update fp12
Ibm ≫ Db2 Universal Database Version 8.2 Update fp13
Ibm ≫ Db2 Universal Database Version 8.2 Update fp14
Ibm ≫ Db2 Universal Database Version 8.2 Update fp15
Ibm ≫ Db2 Universal Database Version 8.2 Update fp2
Ibm ≫ Db2 Universal Database Version 8.2 Update fp3
Ibm ≫ Db2 Universal Database Version 8.2 Update fp4
Ibm ≫ Db2 Universal Database Version 8.2 Update fp5
Ibm ≫ Db2 Universal Database Version 8.2 Update fp6
Ibm ≫ Db2 Universal Database Version 8.2 Update fp7
Ibm ≫ Db2 Universal Database Version 8.2 Update fp8
Ibm ≫ Db2 Universal Database Version 8.2 Update fp9
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.75% 0.749
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT
http://secunia.com/advisories/31787
Vendor Advisory
http://www.securityfocus.com/bid/31058
http://osvdb.org/48148
http://www-01.ibm.com/support/docview.wss?uid=swg21318189
http://www-1.ibm.com/support/docview.wss?uid=swg1JR29274
http://www.securitytracker.com/id?1020826
https://exchange.xforce.ibmcloud.com/vulnerabilities/44984