4.3

CVE-2009-1906

Exploit

The DRDA Services component in IBM DB2 9.1 before FP7 and 9.5 before FP4 allows remote attackers to cause a denial of service (memory corruption and application crash) via an IPv6 address in the correlation token in the APPID string, as demonstrated by an APPID string sent by the third-party DataDirect JDBC driver 3.7.32.

Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Db2 Version9.1 Updatefp1
Ibm ≫ Db2 Version9.1 Updatefp2
Ibm ≫ Db2 Version9.1 Updatefp3
Ibm ≫ Db2 Version9.1 Updatefp3a
Ibm ≫ Db2 Version9.1 Updatefp4
Ibm ≫ Db2 Version9.1 Updatefp4a
Ibm ≫ Db2 Version9.1 Updatefp5
Ibm ≫ Db2 Version9.1 Updatefp6
Ibm ≫ Db2 Version9.1 Updatefp6a
Ibm ≫ Db2 Version9.5 Updatefp1
Ibm ≫ Db2 Version9.5 Updatefp2
Ibm ≫ Db2 Version9.5 Updatefp3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.04% 0.753
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P