admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-29 17:51:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
nvd-json-data-feeds/CVE-2008/CVE-2008-39xx/CVE-2008-3958.json

203 lines
7.5 KiB
JSON
Raw Normal View History

bootstrap
2023-04-24 12:24:31 +02:00
{
"id": "CVE-2008-3958",
"sourceIdentifier": "cve@mitre.org",
"published": "2008-09-11T01:13:47.523",
"lastModified": "2017-08-08T01:32:17.937",
"vulnStatus": "Modified",
"evaluatorComment": "http://secunia.com/advisories/31787\r\n\r\nSome vulnerabilities have been reported in DB2, where some have an unknown impact and others can be exploited by malicious users to perform certain actions with escalated privileges, and by malicious people to cause a DoS or potentially compromise a vulnerable system.",
"descriptions": [
{
"lang": "en",
"value": "IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT/ATTACH data stream that simulates a V7 client connect/attach request. NOTE: this may overlap CVE-2008-3858. NOTE: this issue exists because of an incomplete fix for CVE-2008-3959."
},
{
"lang": "es",
"value": "IBM DB2 UDB 8 antes del Fixpak 17 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda de la instancia) mediante una cadena de datos CONNECT/ATTACH manipulada que simula una petici\u00f3n de cliente V7 conectar/adjuntar. NOTA: esto podr\u00eda superponerse con CVE-2008-3858. NOTA: este problema existe debido a un parche incompleto para CVE-2008-3959."
}
],
"metrics": {
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"acInsufInfo": true,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": true,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:*:fp16:*:*:*:*:*:*",
"versionEndIncluding": "8.0",
"matchCriteriaId": "8A94F484-424C-4DF3-9327-95CFC7B4A83E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "CC1FC760-D058-4DE6-80B3-F3AA22757A10"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:fp10:*:*:*:*:*:*",
"matchCriteriaId": "FBE50207-5779-445A-B3E7-FA548242BD8F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:fp11:*:*:*:*:*:*",
"matchCriteriaId": "940D9A1D-DD61-4C78-8ADC-434F78E5626B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:fp12:*:*:*:*:*:*",
"matchCriteriaId": "2185F942-DCEC-4EE4-840E-62C4C6F1D6FB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:fp13:*:*:*:*:*:*",
"matchCriteriaId": "333F67D2-27CC-4013-B3FA-63BF6F557269"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:fp14:*:*:*:*:*:*",
"matchCriteriaId": "77D67C50-31B6-4058-9B4D-F06EF8D9B3BC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:fp15:*:*:*:*:*:*",
"matchCriteriaId": "5AA59598-F121-491D-BE8C-D7712A3D6E99"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:fp2:*:*:*:*:*:*",
"matchCriteriaId": "72FA9A16-8AFD-4D93-95B4-EAB6E6030D7C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:fp3:*:*:*:*:*:*",
"matchCriteriaId": "BB299EAB-31AA-4BAA-B477-0F909A8418AA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:fp4:*:*:*:*:*:*",
"matchCriteriaId": "6FD22E1E-F5BC-45D5-98F4-EDEE87D718F1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:fp5:*:*:*:*:*:*",
"matchCriteriaId": "222C1B84-0C28-451F-BB02-4CB925263312"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:fp6:*:*:*:*:*:*",
"matchCriteriaId": "08177181-660C-4BF4-9031-74EE89297CE5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:fp6a:*:*:*:*:*:*",
"matchCriteriaId": "AB51AF7F-6D09-4EEE-AE8E-E6CCF06C28E4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:fp6b:*:*:*:*:*:*",
"matchCriteriaId": "64BC5E59-361E-4343-9BB9-9772D47E57B0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:fp6c:*:*:*:*:*:*",
"matchCriteriaId": "A2E1FC49-96AF-4933-BBE8-71DAEAEDD855"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:fp7:*:*:*:*:*:*",
"matchCriteriaId": "0B5FF14E-2971-4F3F-AD25-D00B0FEDA08F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:fp7a:*:*:*:*:*:*",
"matchCriteriaId": "56B7F547-3519-4A12-AB65-C1768153A7DC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:fp7b:*:*:*:*:*:*",
"matchCriteriaId": "FE9D14B8-5B4E-4D27-88B9-EBAC46D8282C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:fp8:*:*:*:*:*:*",
"matchCriteriaId": "19584860-5ADF-4647-AF39-88C236407FAC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:fp8a:*:*:*:*:*:*",
"matchCriteriaId": "6669F847-ED6A-422F-85F7-DAF9B0159F01"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:fp9:*:*:*:*:*:*",
"matchCriteriaId": "20FE296C-25D0-4689-BAA3-AFCA2C1CC388"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:8.0:fp9a:*:*:*:*:*:*",
"matchCriteriaId": "E8D354AD-995D-4FC8-A7C4-7860549A1634"
}
]
}
]
}
],
"references": [
{
"url": "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT",
"source": "cve@mitre.org"
},
{
"url": "http://www-1.ibm.com/support/docview.wss?uid=swg1IZ08134",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/31058",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45133",
"source": "cve@mitre.org"
}
]
}
Reference in New Issue Copy Permalink