CVE-2008-3959

IBM DB2 UDB 8.1 before FixPak 16, 8.2 before FixPak 9, and 9.1 before FixPak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted SQLJRA packet within a CONNECT/ATTACH data stream that simulates a V7 client connect/attach request.

Link	Resource
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ05043	Patch
http://secunia.com/advisories/29022
http://www.appsecinc.com/resources/alerts/db2/2008-01.shtml
https://exchange.xforce.ibmcloud.com/vulnerabilities/45134

Configuration 1

cpe:2.3:a:ibm:db2:8.1:fp1:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1:fp10:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.2:fp7:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1:fp2:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1:fp5:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.2:fp5:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.2:fp3:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1:fp8:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.2:fp2:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1:fp14:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1:fp11:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1:fp7:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.2:fp6:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1:fp12:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1:fp4:*:*:*:*:*:* cpe:2.3:a:ibm:db2:*:fp8:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1:fp6:*:*:*:*:*:* cpe:2.3:a:ibm:db2:*:fp15:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1:fp13:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1:fp3:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.1:fp9:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.2:fp1:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.2:*:*:*:*:*:*:* cpe:2.3:a:ibm:db2:8.2:fp4:*:*:*:*:*:*

---

Published : 2008-09-11 01:13

Updated : 2017-08-08 01:32

---

NVD link : CVE-2008-3959

Mitre link : CVE-2008-3959

No products.

NVD-CWE-noinfo