CVE Vulnerability

CVE-2008-1997

Unspecified vulnerability in the ADMIN_SP_C2 procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unknown vectors. NOTE: the ADMIN_SP_C issue is already covered by CVE-2008-0699.

9 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8 / Impact : 10

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

Scope

References
Link Resource
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06972 Vendor Advisory
http://secunia.com/advisories/29022 Not Applicable
http://www.appsecinc.com/resources/alerts/db2/2008-02.shtml Not Applicable
http://securityreason.com/securityalert/3841 Issue Tracking Third Party Advisory
http://www.securityfocus.com/archive/1/491075/100/0/threaded Third Party Advisory VDB Entry
Configurations

Configuration 1

cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp2a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:-:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:-:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak1:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak10:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak11:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak12:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak13:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak14:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak15:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak2:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak3:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak4:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak5:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak6:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak6a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak6b:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak6c:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak7:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak7a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak7b:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak8:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak8a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak9:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak9a:*:*:*:*:*:*
Information

Published : 2008-04-28 08:05

Updated : 2023-01-17 05:19

NVD link : CVE-2008-1997

Mitre link : CVE-2008-1997

Products Affected
No products.
CWE
CWE-94