CVE-2008-3958: High severity ibm db2 universal database vulnerability

Q: What is the severity of CVE-2008-3958?

The severity of CVE-2008-3958 is classified as high due to the potential for remote denial of service attacks.

Q: How do I fix CVE-2008-3958?

To fix CVE-2008-3958, upgrade IBM DB2 UDB to Fixpak 17 or later.

Q: What versions of IBM DB2 are affected by CVE-2008-3958?

CVE-2008-3958 affects IBM DB2 UDB version 8 before Fixpak 17.

Q: Can CVE-2008-3958 lead to data loss?

CVE-2008-3958 primarily causes a denial of service and does not directly lead to data loss but may disrupt database operations.

Q: Is CVE-2008-3958 exploitable remotely?

Yes, CVE-2008-3958 can be exploited remotely through crafted CONNECT/ATTACH data streams.

Published Sep 9, 2008

Updated

IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT/ATTACH data stream that simulates a V7 client connect/attach request. NOTE: this may overlap CVE-2008-3858. NOTE: this issue exists because of an incomplete fix for CVE-2008-3959.

Affected Software

23 affected components

IBM DB2<=8.0

IBM DB2=8.0

IBM DB2=8.0-fp10

IBM DB2=8.0-fp11

IBM DB2=8.0-fp12

IBM DB2=8.0-fp13

IBM DB2=8.0-fp14

IBM DB2=8.0-fp15

IBM DB2=8.0-fp2

IBM DB2=8.0-fp3

IBM DB2=8.0-fp4

IBM DB2=8.0-fp5

IBM DB2=8.0-fp6

IBM DB2=8.0-fp6a

IBM DB2=8.0-fp6b

IBM DB2=8.0-fp6c

IBM DB2=8.0-fp7

IBM DB2=8.0-fp7a

IBM DB2=8.0-fp7b

IBM DB2=8.0-fp8

IBM DB2=8.0-fp8a

IBM DB2=8.0-fp9

IBM DB2=8.0-fp9a

Event History

Sep 9, 2008

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3958?

The severity of CVE-2008-3958 is classified as high due to the potential for remote denial of service attacks.

How do I fix CVE-2008-3958?

To fix CVE-2008-3958, upgrade IBM DB2 UDB to Fixpak 17 or later.

What versions of IBM DB2 are affected by CVE-2008-3958?