CVE-2008-3853

Buffer overflow in the DAS server program in the Core DAS function component in IBM DB2 9.1 before FP4a and 9.5 before FP1 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via unspecified vectors. NOTE: this might be related to CVE-2007-3676.

Link	Resource
http://www-1.ibm.com/support/docview.wss?uid=swg21255607	Patch
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ12379	Patch
http://www.securityfocus.com/bid/29601	Patch
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ12406
http://secunia.com/advisories/29784
ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT
https://exchange.xforce.ibmcloud.com/vulnerabilities/45141

Configuration 1

cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:hp-ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:*:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:hp-ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:hp-ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:*:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:*:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:*:hp_ux:*:*:*:*:*

---

Published : 2008-08-28 05:41

Updated : 2017-08-08 01:32

---

NVD link : CVE-2008-3853

Mitre link : CVE-2008-3853

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer