Code injection

2008-04-2820:05:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

88.9%

JSON

Unspecified vulnerability in the ADMIN_SP_C2 procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unknown vectors. NOTE: the ADMIN_SP_C issue is already covered by CVE-2008-0699.

CPENameOperatorVersion
db2eq9.1 fp4
db2eq9.1 fp1
db2eq9.1 fp3
db2eq9.1 fp3a
db2eq9.1 fp2a
db2eq9.1 fp2
db2eq9.5
db2eq9.1
db2eq8.0
db2eq8.0 fixpak1

Name	Operator	Version
db2	eq	9.1 fp4
db2	eq	9.1 fp1
db2	eq	9.1 fp3
db2	eq	9.1 fp3a
db2	eq	9.1 fp2a
db2	eq	9.1 fp2
db2	eq	9.5
db2	eq	9.1
db2	eq	8.0
db2	eq	8.0 fixpak1

Rows per page:

1-10 of 311

References

secunia.com/advisories/29022

securityreason.com/securityalert/3841

www-1.ibm.com/support/docview.wss?uid=swg1IZ06972

www.appsecinc.com/resources/alerts/db2/2008-02.shtml

www.securityfocus.com/archive/1/491075/100/0/threaded