Lucene search

PRIOn knowledge basePRION:CVE-2008-1998

HistoryApr 28, 2008 - 8:05 p.m.

Code injection

2008-04-2820:05:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.9%

JSON

The NNSTAT (aka SYSPROC.NNSTAT) procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 on Windows allows remote authenticated users to overwrite arbitrary files via the log file parameter.

CPENameOperatorVersion
db2eq8.0 fp11
db2eq8.0 fp3
db2eq8.0 fp10
db2eq8.0 fp9
db2eq8.0 fp7b
db2eq8.0 fp6a
db2eq8.0 fp9a
db2eq8.0 fp4
db2eq8.0 fp8
db2eq8.0 fp14

Name	Operator	Version
db2	eq	8.0 fp11
db2	eq	8.0 fp3
db2	eq	8.0 fp10
db2	eq	8.0 fp9
db2	eq	8.0 fp7b
db2	eq	8.0 fp6a
db2	eq	8.0 fp9a
db2	eq	8.0 fp4
db2	eq	8.0 fp8
db2	eq	8.0 fp14

Rows per page:

1-10 of 281

References

secunia.com/advisories/29022

secunia.com/advisories/29784

securityreason.com/securityalert/3840

www-1.ibm.com/support/docview.wss?uid=swg1IZ06976

www-1.ibm.com/support/docview.wss?uid=swg1IZ06977

www-1.ibm.com/support/docview.wss?uid=swg1IZ10776

www.appsecinc.com/resources/alerts/db2/2008-03.shtml

www.securityfocus.com/archive/1/491073/100/0/threaded

www.securityfocus.com/bid/28836

exchange.xforce.ibmcloud.com/vulnerabilities/41960