NVD

Id
1902  
Name
CVE-2008-1966  
Description
Multiple buffer overflows in the JAR file administration routines in the BSU JAVA subcomponent in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 allow remote authenticated users to cause a denial of service (instance crash) via a call to the (1) RECOVERJAR or (2) REMOVE_JAR procedure with a crafted parameter, related to (a) sqlj.install_jar and (b) sqlj.replace_jar.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2008-04-27  
Modified Date
2011-01-04  
Seq
2008-1966  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
12348 1902 CVE-2008-1966 IZ08512  View
12349 1902 CVE-2008-1966 IZ08945  View
12350 1902 CVE-2008-1966 IZ15496  View
12351 1902 CVE-2008-1966 http://www-1.ibm.com/support/docview.wss?uid=swg21255607  View
12352 1902 CVE-2008-1966 http://www.appsecinc.com/resources/alerts/db2/2008-04.shtml  View
12353 1902 CVE-2008-1966 20080418 Team SHATTER Security Advisory: Multiple DoS in JAR files manipulation procedures  View
12354 1902 CVE-2008-1966 28835  View
12355 1902 CVE-2008-1966 29601  View
12356 1902 CVE-2008-1966 ibm-db2-recoverjar-removejar-dos(41955)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49064 JVNDB-2008-004374 IBM DB2 の JAR ファイル管理ルーチンにおけるバッファオーバーフローの脆弱性 IBM DB2 の BSU JAVA サブコンポーネントの JAR ファイル管理ルーチンには、(a) sqlj.install_jar および (b) sqlj.replace_jar に関連する処理に不備があるため、バッファオーバーフローの脆弱性が存在します。 CVE-2008-1966 32079 CVE-2008-1966 1902 4 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004374.html 2008-04-27 2012-09-25 View