Lucene search

MitreCVE-2008-0698

HistoryFeb 12, 2008 - 1:00 a.m.

CVE-2008-0698

2008-02-1201:00:00

CWE-119

mitre

web.nvd.nist.gov

cve-2008-0698

buffer overflow

ibm db2 udb

das server

security vulnerability

memory access

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

Low

EPSS

0.003

Percentile

69.4%

JSON

Buffer overflow in the DAS server in IBM DB2 UDB before 8.2 Fixpak 16 has unknown attack vectors, and an impact probably involving “invalid memory access.”

Affected configurations

Nvd

Node

ibmdb2Match8.2_fixpack15

VendorProductVersionCPE
ibmdb28.2_fixpack15cpe:2.3:a:ibm:db2:8.2_fixpack15:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	db2	8.2_fixpack15	cpe:2.3:a:ibm:db2:8.2_fixpack15:::::::*

References

ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT

secunia.com/advisories/28771

www-1.ibm.com/support/docview.wss?uid=swg1IZ05496

www.securityfocus.com/bid/27681

www.vupen.com/english/advisories/2008/0401

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

Low

EPSS

0.003

Percentile

69.4%

JSON

Related for CVE-2008-0698