Test ID:	1.3.6.1.4.1.25623.1.0.900215
Category:	Databases
Title:	IBM Db2 Universal Database Multiple Vulnerabilities (Sep 2008) - Windows
Summary:	IBM Db2 is prone to multiple vulnerabilities.
Description:	Summary: IBM Db2 is prone to multiple vulnerabilities. Vulnerability Insight: The flaws exist due to unspecified errors in processing of - CONNECT/ATTACH requests - DB2FMP process and DB2JDS service Vulnerability Impact: Remote exploitation could allow attackers to bypass security restrictions, cause a denial of service or gain elevated privileges. Affected Software/OS: IBM DB2 version 8 prior to Fixpak 17 on Windows (All). Solution: Update to version 8 Fixpak 17 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-2154 AIX APAR: IZ21983 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ21983 AIX APAR: IZ22142 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22142 AIX APAR: IZ22143 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22143 BugTraq ID: 35409 http://www.securityfocus.com/bid/35409 http://osvdb.org/48147 http://secunia.com/advisories/31787 XForce ISS Database: db2-installjar-priv-escalation(51105) https://exchange.xforce.ibmcloud.com/vulnerabilities/51105 Common Vulnerability Exposure (CVE) ID: CVE-2008-3958 AIX APAR: IZ08134 http://www-1.ibm.com/support/docview.wss?uid=swg1IZ08134 BugTraq ID: 31058 http://www.securityfocus.com/bid/31058 http://osvdb.org/48144 XForce ISS Database: ibm-db2-connect-attach-dos1(45133) https://exchange.xforce.ibmcloud.com/vulnerabilities/45133 Common Vulnerability Exposure (CVE) ID: CVE-2008-3960 AIX APAR: JR29274 http://www-1.ibm.com/support/docview.wss?uid=swg1JR29274 http://osvdb.org/48148 http://www.securitytracker.com/id?1020826 XForce ISS Database: db2-db2jds-dos(44984) https://exchange.xforce.ibmcloud.com/vulnerabilities/44984
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.