CVE-2008-2154: Medium severity ibm db2 universal database vulnerability
IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 provides an INSTALLJAR (aka sqlj.installjar) procedure, which allows remote authenticated users to create or overwrite arbitrary files via unspecified calls.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2154?
CVE-2008-2154 is considered a medium severity vulnerability due to its ability to allow remote authenticated users to create or overwrite arbitrary files.
How do I fix CVE-2008-2154?
To fix CVE-2008-2154, you should upgrade to IBM DB2 version 8 FP17, 9.1 FP5, or 9.5 FP2 or later.
Who is affected by CVE-2008-2154?
CVE-2008-2154 affects IBM DB2 versions 8.0 to 8.0 FP16, 9.1 to 9.1 FP4, and 9.5 to 9.5 FP1.
What types of attacks can CVE-2008-2154 facilitate?
CVE-2008-2154 can facilitate unauthorized file creation or overwriting, potentially leading to further attacks or data compromise.
Is CVE-2008-2154 exploitable remotely?
Yes, CVE-2008-2154 can be exploited remotely by authenticated users who can gain access to the INSTALL_JAR procedure.