ID CVE-2008-4692
Summary The Native Managed Provider for .NET component in IBM DB2 8 before FP17, 9.1 before FP6, and 9.5 before FP2, when a definer cannot maintain objects, preserves views and triggers without marking them inoperative or dropping them, which has unknown impact and attack vectors.
References
Vulnerable Configurations
  • cpe:2.3:a:ibm:db2:8.0:fp1:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp1:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp10:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp10:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp11:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp11:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp12:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp12:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp13:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp13:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp14:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp14:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp15:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp15:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:*:fp16:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:*:fp16:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp2:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp2:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp3:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp3:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp4:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp4:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp4a:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp4a:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp5:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp5:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp6:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp6:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp6a:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp6a:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp6b:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp6b:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp6c:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp6c:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp7:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp7:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp7a:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp7a:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp7b:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp7b:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp8:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp8:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp8a:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp8a:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp9:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp9:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.0:fp9a:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.0:fp9a:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.2:fp5:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.2:fp5:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:8.2:fp1:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:8.2:fp1:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:9.0:fp1:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:9.0:fp1:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 08-08-2017 - 01:32)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
aixapar
  • IZ22287
  • IZ22306
  • IZ22307
confirm
secunia
  • 31787
  • 32368
vupen ADV-2008-2893
xf ibm-db2-native-managed-unspecified(46021)
Last major update 08-08-2017 - 01:32
Published 22-10-2008 - 18:00
Last modified 08-08-2017 - 01:32
Back to Top