CVE-2008-4692 The Native Managed Provider for .NET component in IBM DB2 8 before FP17, 9.1 before FP6, and 9.5 before FP2, when a definer cannot maintain objects, preserves views and triggers without marking them i...
HighCVSS 10.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Native Managed Provider for .NET component in IBM DB2 8 before FP17, 9.1 before FP6, and 9.5 before FP2, when a definer cannot maintain objects, preserves views and triggers without marking them inoperative or dropping them, which has unknown impact and attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm db2 | <= 8.0 | No fix listed |
| ibm db2 | <= 9.1 | No fix listed |
| ibm db2 | <= 9.5 | No fix listed |
| ibm db2 | = 8.0-fp1 | No fix listed |
| ibm db2 | = 8.0-fp10 | No fix listed |
| ibm db2 | = 8.0-fp11 | No fix listed |
| ibm db2 | = 8.0-fp12 | No fix listed |
| ibm db2 | = 8.0-fp13 | No fix listed |
| ibm db2 | = 8.0-fp14 | No fix listed |
| ibm db2 | = 8.0-fp15 | No fix listed |
| ibm db2 | = 8.0-fp2 | No fix listed |
| ibm db2 | = 8.0-fp3 | No fix listed |
| ibm db2 | = 8.0-fp4 | No fix listed |
| ibm db2 | = 8.0-fp4a | No fix listed |
| ibm db2 | = 8.0-fp5 | No fix listed |
| ibm db2 | = 8.0-fp6 | No fix listed |
| ibm db2 | = 8.0-fp6a | No fix listed |
| ibm db2 | = 8.0-fp6b | No fix listed |
| ibm db2 | = 8.0-fp6c | No fix listed |
| ibm db2 | = 8.0-fp7 | No fix listed |
| ibm db2 | = 8.0-fp7a | No fix listed |
| ibm db2 | = 8.0-fp7b | No fix listed |
| ibm db2 | = 8.0-fp8 | No fix listed |
| ibm db2 | = 8.0-fp8a | No fix listed |
| ibm db2 | = 8.0-fp9 | No fix listed |
Show 9 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm db2 | = 8.0-fp9a | No fix listed |
| ibm db2 | = 9.1 | No fix listed |
| ibm db2 | = 9.1-fp1 | No fix listed |
| ibm db2 | = 9.1-fp2 | No fix listed |
| ibm db2 | = 9.1-fp3 | No fix listed |
| ibm db2 | = 9.1-fp3a | No fix listed |
| ibm db2 | = 9.1-fp4 | No fix listed |
| ibm db2 | = 9.1-fp4a | No fix listed |
| ibm db2 | = 9.5 | No fix listed |
References
- 31787 third-party-advisory
- 32368 third-party-advisory vendor-advisory
- IZ22287 vendor-advisory
- IZ22306 vendor-advisory
- IZ22307 vendor-advisory
- www-01.ibm.com
- ADV-2008-2893 vdb-entry
- ibm-db2-native-managed-unspecified(46021) vdb-entry