Summary
The host is installed with IBM DB2 and is prone to multiple vulnerabilities.
Impact
Successful exploitation will allow attacker to bypass security restrictions, cause a denial of service or gain elevated privileges.
Impact Level: System/Application
Solution
Update DB2 8 Fixpak 17 or 9.1 Fixpak 5 or 9.5 Fixpak 2 or later.
http://www-01.ibm.com/support/docview.wss?rs=0&uid=swg24022678
Insight
The flaws are due to,
- An unspecified error related to the DB2FMP process running with OS prvileges.
- An error in INSTALL_JAR procedure might allows remote authenticated users to create or overwrite arbitrary files via unspecified calls.
- A boundary error in DAS server code can be exploited to cause a buffer overflow via via unspecified vectors.
Affected
IBM DB2 version 8 prior to Fixpak 17
IBM DB2 version 9.1 prior to Fixpak 5
IBM DB2 version 9.5 prior to Fixpak 2
References
Updated on 2017-03-28
Severity
Classification
-
CVE CVE-2008-2154, CVE-2008-6820, CVE-2008-6821 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Adobe Acrobat Multiple Unspecified Vulnerabilities -01 May13 (Windows)
- Adobe Flash Player Arbitrary Code Execution Vulnerability - 01 Feb14 (Linux)
- Adobe Acrobat Multiple Vulnerabilities-01 Dec14 (Mac OS X)
- Adobe Acrobat and Reader PDF Handling Multiple Vulnerabilities (Windows)
- Adobe AIR Multiple Vulnerabilities-01 Jun14 (Mac OS X)