CVE-2008-1998: High severity microsoft windows operating system vulnerability

Published Apr 28, 2008
·
Updated

The NNSTAT (aka SYSPROC.NNSTAT) procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 on Windows allows remote authenticated users to overwrite arbitrary files via the log file parameter.

Affected Software

29 affected components
Microsoft Windows
IBM db2=8.0-fp1
IBM db2=8.0-fp10
IBM db2=8.0-fp11
IBM db2=8.0-fp12
IBM db2=8.0-fp13
IBM db2=8.0-fp14
IBM db2=8.0-fp15
IBM db2=8.0-fp2
IBM db2=8.0-fp3
IBM db2=8.0-fp4
IBM db2=8.0-fp5
IBM db2=8.0-fp6
IBM db2=8.0-fp6a
IBM db2=8.0-fp6b
IBM db2=8.0-fp6c
IBM db2=8.0-fp7
IBM db2=8.0-fp7a
IBM db2=8.0-fp7b
IBM db2=8.0-fp8
IBM db2=8.0-fp8a
IBM db2=8.0-fp9
IBM db2=8.0-fp9a
IBM db2=9.1-fp1
IBM db2=9.1-fp2
IBM db2=9.1-fp3
IBM db2=9.1-fp3a
IBM db2=9.1-fp4
IBM db2=9.5

Event History

Apr 28, 2008
CVE Published
via MITRE·06:21 PM
Data Sourced
via MITRE·06:21 PM
Description
Data Sourced
08:05 PM
DescriptionWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2008-1998?

CVE-2008-1998 is considered a high severity vulnerability due to its potential to allow remote authenticated users to overwrite arbitrary files.

2

How do I fix CVE-2008-1998?

To fix CVE-2008-1998, upgrade to IBM DB2 versions 8 FP16, 9.1 FP4a, or 9.5 FP1 and ensure that proper user permissions are enforced.

3

Which versions of IBM DB2 are affected by CVE-2008-1998?

CVE-2008-1998 affects IBM DB2 versions 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 on Windows.

4

Can CVE-2008-1998 be exploited remotely?

Yes, CVE-2008-1998 can be exploited remotely by authenticated users to compromise system integrity.

5

What actions can be taken to mitigate the risks of CVE-2008-1998?

To mitigate risks associated with CVE-2008-1998, implement strict access controls and regularly update your software to the latest versions.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203