PT-2008-3519
CVE-2008-1998
·
تاريخ النشر
2008-04-28
·
تاريخ التحديث
2018-10-31
الوصف من
CVSS 2.0
8.5
عاليةالمقاييسAV:N/AC:M/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
IBM DB2 versions 8.0 through 8.0 FP15
IBM DB2 versions 9.1 through 9.1 FP3
IBM DB2 versions 9.5 through 9.5 FP0
Description
The issue allows remote authenticated users to overwrite arbitrary files via the log file parameter in the NNSTAT procedure.
Recommendations
For IBM DB2 version 8, update to at least FP16 to resolve the issue.
For IBM DB2 version 9.1, update to at least FP4a to resolve the issue.
For IBM DB2 version 9.5, update to at least FP1 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾