Lucene search

MitreCVE-2006-4257

HistoryAug 21, 2006 - 8:04 p.m.

CVE-2006-4257

2006-08-2120:04:00

CWE-399

mitre

web.nvd.nist.gov

ibm

db2

udb

denial of service

vulnerability

nvd

cve-2006-4257

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6.1

Confidence

Low

EPSS

0.084

Percentile

94.4%

JSON

IBM DB2 Universal Database (UDB) before 8.1 FixPak 13 allows remote authenticated users to cause a denial of service (crash) by (1) sending the first ACCSEC command without an RDBNAM parameter during the CONNECT process, or (2) sending crafted SQLJRA packet, which results in a null dereference.

Affected configurations

Nvd

Node

ibmdb2Match8.0aix

ibmdb2Match8.0linux

ibmdb2Match8.0os_390

ibmdb2Match8.1aix

ibmdb2Match8.1hp_ux

ibmdb2Match8.1linux

ibmdb2Match8.1solaris

ibmdb2Match8.1windows

ibmdb2Match8.1.4aix

ibmdb2Match8.1.4hp_ux

ibmdb2Match8.1.4linux

ibmdb2Match8.1.4solaris

ibmdb2Match8.1.4windows

ibmdb2Match8.1.5aix

ibmdb2Match8.1.5hp_ux

ibmdb2Match8.1.5linux

ibmdb2Match8.1.5solaris

ibmdb2Match8.1.5windows

ibmdb2Match8.1.6aix

ibmdb2Match8.1.6hp_ux

ibmdb2Match8.1.6linux

ibmdb2Match8.1.6solaris

ibmdb2Match8.1.6windows

ibmdb2Match8.1.6caix

ibmdb2Match8.1.6chp_ux

ibmdb2Match8.1.6clinux

ibmdb2Match8.1.6csolaris

ibmdb2Match8.1.6cwindows

ibmdb2Match8.1.7aix

ibmdb2Match8.1.7hp_ux

ibmdb2Match8.1.7linux

ibmdb2Match8.1.7solaris

ibmdb2Match8.1.7windows

ibmdb2Match8.1.7baix

ibmdb2Match8.1.7bhp_ux

ibmdb2Match8.1.7blinux

ibmdb2Match8.1.7bsolaris

ibmdb2Match8.1.7bwindows

ibmdb2Match8.1.8aix

ibmdb2Match8.1.8hp_ux

ibmdb2Match8.1.8linux

ibmdb2Match8.1.8solaris

ibmdb2Match8.1.8windows

ibmdb2Match8.1.8aaix

ibmdb2Match8.1.8ahp_ux

ibmdb2Match8.1.8alinux

ibmdb2Match8.1.8asolaris

ibmdb2Match8.1.8awindows

ibmdb2Match8.1.9aix

ibmdb2Match8.1.9hp_ux

ibmdb2Match8.1.9linux

ibmdb2Match8.1.9solaris

ibmdb2Match8.1.9windows

ibmdb2Match8.1.9aaix

ibmdb2Match8.1.9ahp_ux

ibmdb2Match8.1.9alinux

ibmdb2Match8.1.9asolaris

ibmdb2Match8.1.9awindows

ibmdb2Match8.2linux

ibmdb2Match8.10linux

ibmdb2Match8.10solaris

ibmdb2Match8.10windows

ibmdb2Match8.12linux

ibmdb2Match8.12solaris

ibmdb2Match8.12windows

VendorProductVersionCPE
ibmdb28.0cpe:2.3:a:ibm:db2:8.0:*:aix:*:*:*:*:*
ibmdb28.0cpe:2.3:a:ibm:db2:8.0:*:linux:*:*:*:*:*
ibmdb28.0cpe:2.3:a:ibm:db2:8.0:*:os_390:*:*:*:*:*
ibmdb28.1cpe:2.3:a:ibm:db2:8.1:*:aix:*:*:*:*:*
ibmdb28.1cpe:2.3:a:ibm:db2:8.1:*:hp_ux:*:*:*:*:*
ibmdb28.1cpe:2.3:a:ibm:db2:8.1:*:linux:*:*:*:*:*
ibmdb28.1cpe:2.3:a:ibm:db2:8.1:*:solaris:*:*:*:*:*
ibmdb28.1cpe:2.3:a:ibm:db2:8.1:*:windows:*:*:*:*:*
ibmdb28.1.4cpe:2.3:a:ibm:db2:8.1.4:*:aix:*:*:*:*:*
ibmdb28.1.4cpe:2.3:a:ibm:db2:8.1.4:*:hp_ux:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	db2	8.0	cpe:2.3:a:ibm:db2:8.0::aix:::::
ibm	db2	8.0	cpe:2.3:a:ibm:db2:8.0::linux:::::
ibm	db2	8.0	cpe:2.3:a:ibm:db2:8.0::os_390:::::
ibm	db2	8.1	cpe:2.3:a:ibm:db2:8.1::aix:::::
ibm	db2	8.1	cpe:2.3:a:ibm:db2:8.1::hp_ux:::::
ibm	db2	8.1	cpe:2.3:a:ibm:db2:8.1::linux:::::
ibm	db2	8.1	cpe:2.3:a:ibm:db2:8.1::solaris:::::
ibm	db2	8.1	cpe:2.3:a:ibm:db2:8.1::windows:::::
ibm	db2	8.1.4	cpe:2.3:a:ibm:db2:8.1.4::aix:::::
ibm	db2	8.1.4	cpe:2.3:a:ibm:db2:8.1.4::hp_ux:::::

Rows per page:

1-10 of 651

References

ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT

secunia.com/advisories/21550

www-1.ibm.com/support/docview.wss?uid=swg24013114

www.appsecinc.com/resources/alerts/db2/2006-09-05.shtml

www.securityfocus.com/archive/1/445298/100/0/threaded

www.securityfocus.com/archive/1/454307/100/0/threaded

www.securityfocus.com/bid/19586

www.vupen.com/english/advisories/2006/3328

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6.1

Confidence

Low

EPSS

0.084

Percentile

94.4%

JSON

Related for CVE-2006-4257