CVE Vulnerabilities

CVE-2008-3858

Published: Aug 28, 2008 | Modified: Aug 08, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

The Downlevel DB2RA Support component in IBM DB2 9.1 before Fixpak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT data stream that simulates a V7 client connect request.

Affected Software

Name Vendor Start Version End Version
Db2_universal_database Ibm 9.1 9.1
Db2_universal_database Ibm 9.1 9.1
Db2_universal_database Ibm 9.1 9.1
Db2_universal_database Ibm 9.1 9.1
Db2_universal_database Ibm 9.1 9.1
Db2_universal_database Ibm 9.1 9.1
Db2_universal_database Ibm 9.1 9.1
Db2_universal_database Ibm 9.1 9.1
Db2_universal_database Ibm 9.1 9.1
Db2_universal_database Ibm 9.1 9.1
Db2_universal_database Ibm 9.1 9.1
Db2_universal_database Ibm 9.1 9.1
Db2_universal_database Ibm 9.1 9.1
Db2_universal_database Ibm 9.1 9.1
Db2_universal_database Ibm 9.1 9.1
Db2_universal_database Ibm 9.1 9.1
Db2_universal_database Ibm 9.1 9.1
Db2_universal_database Ibm 9.1 9.1
Db2_universal_database Ibm 9.1 9.1
Db2_universal_database Ibm 9.1 9.1
Db2_universal_database Ibm 9.1 9.1

References