Test Kennung:	1.3.6.1.4.1.25623.1.0.900677
Kategorie:	Databases
Titel:	IBM Db2 Multiple Vulnerabilities - Windows
Zusammenfassung:	IBM Db2 is prone to multiple vulnerabilities.
Beschreibung:	Summary: IBM Db2 is prone to multiple vulnerabilities. Vulnerability Insight: The flaws are due to: - An unspecified error related to the DB2FMP process running with OS privileges. - An error in INSTALL_JAR procedure might allows remote authenticated users to create or overwrite arbitrary files via unspecified calls. - A boundary error in DAS server code can be exploited to cause a buffer overflow via via unspecified vectors. Vulnerability Impact: Successful exploitation will allow attacker to bypass security restrictions, cause a denial of service or gain elevated privileges. Affected Software/OS: IBM Db2 version 8 prior to Fixpack 17, 9.1 prior to Fixpack 5 and 9.5 prior to Fixpack 2 Solution: Update Db2 8 Fixpakk 17, 9.1 Fixpack 5, 9.5 Fixpack 2 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-6821 AIX APAR: IZ22004 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22004 AIX APAR: IZ22188 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22188 AIX APAR: IZ22190 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22190 BugTraq ID: 35408 http://www.securityfocus.com/bid/35408 http://secunia.com/advisories/31787 XForce ISS Database: db2-das-bo(51108) https://exchange.xforce.ibmcloud.com/vulnerabilities/51108 Common Vulnerability Exposure (CVE) ID: CVE-2008-6820 AIX APAR: JR30026 http://www-01.ibm.com/support/docview.wss?uid=swg1JR30026 AIX APAR: JR30227 http://www-01.ibm.com/support/docview.wss?uid=swg1JR30227 AIX APAR: JR30228 http://www-01.ibm.com/support/docview.wss?uid=swg1JR30228 BugTraq ID: 31058 http://www.securityfocus.com/bid/31058 http://osvdb.org/48149 Common Vulnerability Exposure (CVE) ID: CVE-2008-2154 AIX APAR: IZ21983 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ21983 AIX APAR: IZ22142 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22142 AIX APAR: IZ22143 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22143 BugTraq ID: 35409 http://www.securityfocus.com/bid/35409 http://osvdb.org/48147 XForce ISS Database: db2-installjar-priv-escalation(51105) https://exchange.xforce.ibmcloud.com/vulnerabilities/51105
Copyright	Copyright (C) 2009 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.