Lucene search

K
cve[email protected]CVE-2008-3959
HistorySep 11, 2008 - 1:13 a.m.

CVE-2008-3959

2008-09-1101:13:00
NVD-CWE-noinfo
web.nvd.nist.gov
22
4
ibm
db2
udb
remote
dos
vulnerability
cve-2008-3959
sqljra
nvd

8.8 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

80.1%

IBM DB2 UDB 8.1 before FixPak 16, 8.2 before FixPak 9, and 9.1 before FixPak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted SQLJRA packet within a CONNECT/ATTACH data stream that simulates a V7 client connect/attach request.

CPENameOperatorVersion
ibm:db2ibm db2eq8.1
ibm:db2ibm db2eq8.2

Social References

More

8.8 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

80.1%

Related for CVE-2008-3959