CVE-2008-1998

ALTO 8.5CVE-2008-1998 · Published 28/04/2008 · updated 16/06/2026

En resumen

CVE-2008-1998 es una vulnerabilidad ALTO (CVSS 8.5) que afecta a db2 (ibm).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.5%, mayor que el 84.7% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
db2 ibm	`= 8.0= 9.1= 9.5`	No fix yet

Description

The NNSTAT (aka SYSPROC.NNSTAT) procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 on Windows allows remote authenticated users to overwrite arbitrary files via the log file parameter.

References

secunia.com/advisories/29022 · Third Party Advisory
secunia.com/advisories/29784 · Third Party Advisory
securityreason.com/securityalert/3840 · Third Party Advisory
www-1.ibm.com/support/docview.wss · Vendor Advisory
www-1.ibm.com/support/docview.wss · Vendor Advisory
www-1.ibm.com/support/docview.wss · Vendor Advisory
appsecinc.com/resources/alerts/db2/2008-03.shtml · Third Party Advisory
securityfocus.com/archive/1/491073/100/0/threaded · Third Party Advisory
securityfocus.com/bid/28836 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/41960 · Third Party Advisory

Más vulnerabilidades de db2

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

db2

ibm

= 8.0= 9.1= 9.5

No fix yet

Más vulnerabilidades de db2

Ver todo →