Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-3857
HistoryAug 28, 2008 - 5:41 p.m.

CVE-2008-3857

2008-08-2817:41:00
CWE-200
[email protected]
web.nvd.nist.gov
6

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

5.7

Confidence

Low

EPSS

0

Percentile

5.1%

JSON

The Base Service Utilities component in IBM DB2 9.1 before Fixpak 5 retains a cleartext password in memory after the database connection that sent the password is fully established, which might allow local users to obtain sensitive information by reading a memory dump.

Affected configurations

Nvd
Node
ibmdb2_universal_databaseMatch9.1aix
OR
ibmdb2_universal_databaseMatch9.1hp_ux
OR
ibmdb2_universal_databaseMatch9.1linux
OR
ibmdb2_universal_databaseMatch9.1solaris
OR
ibmdb2_universal_databaseMatch9.1windows
OR
ibmdb2_universal_databaseMatch9.1fp2aix
OR
ibmdb2_universal_databaseMatch9.1fp2hp-ux
OR
ibmdb2_universal_databaseMatch9.1fp2linux
OR
ibmdb2_universal_databaseMatch9.1fp2solaris
OR
ibmdb2_universal_databaseMatch9.1fp2windows
OR
ibmdb2_universal_databaseMatch9.1fp3aix
OR
ibmdb2_universal_databaseMatch9.1fp3hp-ux
OR
ibmdb2_universal_databaseMatch9.1fp3linux
OR
ibmdb2_universal_databaseMatch9.1fp3solaris
OR
ibmdb2_universal_databaseMatch9.1fp3windows
OR
ibmdb2_universal_databaseMatch9.1fp4hp-ux
OR
ibmdb2_universal_databaseMatch9.1fp4solaris
OR
ibmdb2_universal_databaseMatch9.1fp4windows
OR
ibmdb2_universal_databaseMatch9.1fp4aaix
OR
ibmdb2_universal_databaseMatch9.1fp4ahp-ux
OR
ibmdb2_universal_databaseMatch9.1fp4alinux
OR
ibmdb2_universal_databaseMatch9.1fp4asolaris
OR
ibmdb2_universal_databaseMatch9.1fp4awindows
VendorProductVersionCPE
ibmdb2_universal_database9.1cpe:2.3:a:ibm:db2_universal_database:9.1:*:aix:*:*:*:*:*
ibmdb2_universal_database9.1cpe:2.3:a:ibm:db2_universal_database:9.1:*:hp_ux:*:*:*:*:*
ibmdb2_universal_database9.1cpe:2.3:a:ibm:db2_universal_database:9.1:*:linux:*:*:*:*:*
ibmdb2_universal_database9.1cpe:2.3:a:ibm:db2_universal_database:9.1:*:solaris:*:*:*:*:*
ibmdb2_universal_database9.1cpe:2.3:a:ibm:db2_universal_database:9.1:*:windows:*:*:*:*:*
ibmdb2_universal_database9.1cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:aix:*:*:*:*:*
ibmdb2_universal_database9.1cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:hp-ux:*:*:*:*:*
ibmdb2_universal_database9.1cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:linux:*:*:*:*:*
ibmdb2_universal_database9.1cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:solaris:*:*:*:*:*
ibmdb2_universal_database9.1cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:windows:*:*:*:*:*
Rows per page:
1-10 of 231

Related

prion 1
cve 1
cvelist 1
nessus 1
prion
prion
Default credentials
2008-08-28 17:41:00
cve
cve
CVE-2008-3857
2008-08-28 17:41:00
cvelist
cvelist
CVE-2008-3857
2008-08-28 17:00:00
nessus
nessus
IBM DB2 < 9 Fix Pack 5 Multiple Vulnerabilities
2008-06-10 00:00:00

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

5.7

Confidence

Low

EPSS

0

Percentile

5.1%

JSON
Related for NVD:CVE-2008-3857
prion1cve1cvelist1nessus1