CVE-2008-3853 Buffer overflow in the DAS server program in the Core DAS function component in IBM DB2 9.1 before FP4a and 9.5 before FP1 allows remote attackers to execute arbitrary code or cause a denial of servic...
HighCVSS 9.3
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the DAS server program in the Core DAS function component in IBM DB2 9.1 before FP4a and 9.5 before FP1 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via unspecified vectors. NOTE: this might be related to CVE-2007-3676.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm db2 universal database | = 9.1 | No fix listed |
| ibm db2 universal database | = 9.1-fp2 | No fix listed |
| ibm db2 universal database | = 9.1-fp3 | No fix listed |
| ibm db2 universal database | = 9.1-fp4 | No fix listed |
References
- 29784 third-party-advisory
- IZ12406 vendor-advisory
- IZ12379 patch vendor-advisory
- www-1.ibm.com patch
- 29601 patch vdb-entry
- ibm-db2-das-bo(45141) vdb-entry