Lucene search
HistorySep 11, 2008 - 1:13 a.m.
CVE-2008-3959
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.2 Medium
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.2%
IBM DB2 UDB 8.1 before FixPak 16, 8.2 before FixPak 9, and 9.1 before FixPak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted SQLJRA packet within a CONNECT/ATTACH data stream that simulates a V7 client connect/attach request.
Affected configurations
Node
ibmdb2Range≤8.1fp15
ORibmdb2Range≤8.2fp8
ORibmdb2Match8.1fp1
ORibmdb2Match8.1fp10
ORibmdb2Match8.1fp11
ORibmdb2Match8.1fp12
ORibmdb2Match8.1fp13
ORibmdb2Match8.1fp14
ORibmdb2Match8.1fp2
ORibmdb2Match8.1fp3
ORibmdb2Match8.1fp4
ORibmdb2Match8.1fp5
ORibmdb2Match8.1fp6
ORibmdb2Match8.1fp7
ORibmdb2Match8.1fp8
ORibmdb2Match8.1fp9
ORibmdb2Match8.2
ORibmdb2Match8.2fp1
ORibmdb2Match8.2fp2
ORibmdb2Match8.2fp3
ORibmdb2Match8.2fp4
ORibmdb2Match8.2fp5
ORibmdb2Match8.2fp6
ORibmdb2Match8.2fp7
Related
cve
cve
CVE-2008-3959
2008-09-11 01:13:47
CVE-2008-3958
2008-09-11 01:13:47
prion
prion
Cross site request forgery (csrf)
2008-09-11 01:13:00
Design/Logic Flaw
2008-09-11 01:13:00
cvelist
cvelist
CVE-2008-3959
2008-09-09 14:00:00
CVE-2008-3958
2008-09-09 14:00:00
nvd
nvd
CVE-2008-3958
2008-09-11 01:13:47
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.2 Medium
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.2%
Related for NVD:CVE-2008-3959