CVE-2008-1998

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 8.0 through 8.0 FP15 IBM DB2 versions 9.1 through 9.1 FP3 IBM DB2 versions 9.5 through 9.5 FP0

Description The issue allows remote authenticated users to overwrite arbitrary files via the log file parameter in the NNSTAT procedure.

Recommendations For IBM DB2 version 8, update to at least FP16 to resolve the issue. For IBM DB2 version 9.1, update to at least FP4a to resolve the issue. For IBM DB2 version 9.5, update to at least FP1 to resolve the issue.