CVE-2008-3858: Medium severity ibm db2 universal database vulnerability
The Downlevel DB2RA Support component in IBM DB2 9.1 before Fixpak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT data stream that simulates a V7 client connect request.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3858?
CVE-2008-3858 is classified as a denial of service vulnerability that can cause an instance crash.
How do I fix CVE-2008-3858?
To fix CVE-2008-3858, apply Fixpak 4a or later for IBM DB2 version 9.1.
What versions of IBM DB2 are affected by CVE-2008-3858?
CVE-2008-3858 affects IBM DB2 version 9.1 before Fixpak 4a, including multiple platforms such as Windows, AIX, Solaris, HP-UX, and Linux.
What type of attack is associated with CVE-2008-3858?
CVE-2008-3858 is exploited via a crafted CONNECT data stream that simulates a V7 client connect request.
Who is impacted by CVE-2008-3858?
Organizations using affected versions of IBM DB2 9.1 without the necessary fixes are at risk of denial of service attacks due to CVE-2008-3858.