CVE-2008-3855: Medium severity ibm db2 universal database vulnerability

Published Aug 28, 2008
·
Updated

Unspecified vulnerability in the DB2 Administration Server (DAS) in the Core DAS function component in IBM DB2 9.1 before Fixpak 5 allows local users to gain privileges, aka a "FILE CREATION VULNERABILITY." NOTE: this may be the same as CVE-2007-5664.

Affected Software

25 affected components
IBM DB2 Universal Database=9.1
IBM DB2 Universal Database=9.1
IBM DB2 Universal Database=9.1
IBM DB2 Universal Database=9.1
IBM DB2 Universal Database=9.1
IBM DB2 Universal Database=9.1-fp2
IBM DB2 Universal Database=9.1-fp2
IBM DB2 Universal Database=9.1-fp2
IBM DB2 Universal Database=9.1-fp2
IBM DB2 Universal Database=9.1-fp2
IBM DB2 Universal Database=9.1-fp3
IBM DB2 Universal Database=9.1-fp3
IBM DB2 Universal Database=9.1-fp3
IBM DB2 Universal Database=9.1-fp3
IBM DB2 Universal Database=9.1-fp3
IBM DB2 Universal Database=9.1-fp4
IBM DB2 Universal Database=9.1-fp4
IBM DB2 Universal Database=9.1-fp4
IBM DB2 Universal Database=9.1-fp4
IBM DB2 Universal Database=9.1-fp4
IBM DB2 Universal Database=9.1-fp4a
IBM DB2 Universal Database=9.1-fp4a
IBM DB2 Universal Database=9.1-fp4a
IBM DB2 Universal Database=9.1-fp4a
IBM DB2 Universal Database=9.1-fp4a

Remediation

Patch Available

http://www-1.ibm.com/support/docview.wss?uid=swg21255607

Event History

Aug 28, 2008
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2008-3855?

CVE-2008-3855 is classified as a high-severity vulnerability that allows local users to gain elevated privileges.

2

How do I fix CVE-2008-3855?

To fix CVE-2008-3855, upgrade to IBM DB2 9.1 Fixpak 5 or later.

3

Who is affected by CVE-2008-3855?

CVE-2008-3855 affects local users of IBM DB2 version 9.1 prior to Fixpak 5.

4

What kind of vulnerability is CVE-2008-3855?

CVE-2008-3855 is an unspecified file creation vulnerability in the DB2 Administration Server.

5

Is CVE-2008-3855 related to any other vulnerabilities?

Yes, CVE-2008-3855 may be related to CVE-2007-5664, which details similar privilege escalation issues.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203