Lucene search

K
cve[email protected]CVE-2008-6821
HistoryJun 03, 2009 - 9:00 p.m.

CVE-2008-6821

2009-06-0321:00:00
CWE-119
web.nvd.nist.gov
26
ibm db2
das server
buffer overflow
arbitrary code execution
denial of service
cve-2008-6821

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.6 High

AI Score

Confidence

High

0.043 Low

EPSS

Percentile

92.4%

Buffer overflow in the DAS server in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 might allow attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, a different vulnerability than CVE-2007-3676 and CVE-2008-3853.

Affected configurations

NVD
Node
ibmdb2Match8.0fp1
OR
ibmdb2Match8.0fp10
OR
ibmdb2Match8.0fp11
OR
ibmdb2Match8.0fp12
OR
ibmdb2Match8.0fp13
OR
ibmdb2Match8.0fp14
OR
ibmdb2Match8.0fp15
OR
ibmdb2Match8.0fp16
OR
ibmdb2Match9.1fp1
OR
ibmdb2Match9.1fp2
OR
ibmdb2Match9.1fp3
OR
ibmdb2Match9.1fp3a
OR
ibmdb2Match9.1fp4
OR
ibmdb2Match9.1fp4a
OR
ibmdb2Match9.5fp1

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.6 High

AI Score

Confidence

High

0.043 Low

EPSS

Percentile

92.4%