CVE

Id
34810  
CVE No.
CVE-2008-4693  
Status
Candidate  
Description
The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES."  
Phase
Assigned (20081022)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
381188 34810 CVE-2008-4693 CONFIRM:ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT  View
381189 34810 CVE-2008-4693 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg27013892  View
381190 34810 CVE-2008-4693 AIXAPAR:IZ23915  View
381191 34810 CVE-2008-4693 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IZ23915  View
381192 34810 CVE-2008-4693 AIXAPAR:IZ28489  View
381193 34810 CVE-2008-4693 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IZ28489  View
381194 34810 CVE-2008-4693 VUPEN:ADV-2008-2893  View
381195 34810 CVE-2008-4693 URL:http://www.vupen.com/english/advisories/2008/2893  View
381196 34810 CVE-2008-4693 SECUNIA:32368  View
381197 34810 CVE-2008-4693 URL:http://secunia.com/advisories/32368  View
381198 34810 CVE-2008-4693 XF:ibm-db2-sortlist-info-disclosure(46022)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47005 JVNDB-2008-002315 Opera の Fast Forward 機能におけるクロスサイトスクリプティングの脆弱性 Opera の Fast Forward 機能には、ページがフレーム内にある場合、この URL を含むページの代わりに外側のページのコンテキスト内でスクリプトを実行してしまうことに起因する、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-4697 34810 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002315.html  View