CVE-2008-1997

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2008-1997
Unspecified vulnerability in the ADMIN_SP_C2 procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unknown vectors. NOTE: the ADMIN_SP_C issue is already covered by CVE-2008-0699.

9.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability : 8.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://secunia.com/advisories/29022 Not Applicable
http://securityreason.com/securityalert/3841 Issue Tracking Third Party Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06972 Vendor Advisory
http://www.appsecinc.com/resources/alerts/db2/2008-02.shtml Not Applicable
http://www.securityfocus.com/archive/1/491075/100/0/threaded Third Party Advisory VDB Entry
http://secunia.com/advisories/29022 Not Applicable
http://securityreason.com/securityalert/3841 Issue Tracking Third Party Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06972 Vendor Advisory
http://www.appsecinc.com/resources/alerts/db2/2008-02.shtml Not Applicable
http://www.securityfocus.com/archive/1/491075/100/0/threaded Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:db2:8.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak1:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak10:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak11:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak12:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak13:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak14:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak15:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak2:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak3:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak4:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak5:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak6:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak6a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak6b:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak6c:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak7:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak7a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak7b:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak8:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak8a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak9:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:8.0:fixpak9a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:-:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp2a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:-:*:*:*:*:*:*
History

21 Nov 2024, 00:45

Type Values Removed Values Added
References () http://secunia.com/advisories/29022 - Not Applicable () http://secunia.com/advisories/29022 - Not Applicable
References () http://securityreason.com/securityalert/3841 - Issue Tracking, Third Party Advisory () http://securityreason.com/securityalert/3841 - Issue Tracking, Third Party Advisory
References () http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06972 - Vendor Advisory () http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06972 - Vendor Advisory
References () http://www.appsecinc.com/resources/alerts/db2/2008-02.shtml - Not Applicable () http://www.appsecinc.com/resources/alerts/db2/2008-02.shtml - Not Applicable
References () http://www.securityfocus.com/archive/1/491075/100/0/threaded - Third Party Advisory, VDB Entry () http://www.securityfocus.com/archive/1/491075/100/0/threaded - Third Party Advisory, VDB Entry
Information

Published : 2008-04-28 20:05

Updated : 2025-04-09 00:30

NVD link : CVE-2008-1997

Mitre link : CVE-2008-1997

CVE.ORG link : CVE-2008-1997

JSON object : View

Products Affected

ibm

  • db2
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')