CVE-2008-3959: Medium severity ibm db2 universal database vulnerability

Q: What is the severity of CVE-2008-3959?

CVE-2008-3959 is classified as a denial of service vulnerability.

Q: How do I fix CVE-2008-3959?

To fix CVE-2008-3959, you should apply the latest FixPak for your version of IBM DB2 UDB.

Q: What versions of IBM DB2 UDB are affected by CVE-2008-3959?

CVE-2008-3959 affects IBM DB2 UDB versions 8.1 before FixPak 16, 8.2 before FixPak 9, and 9.1 before FixPak 4a.

Q: What kind of attack can exploit CVE-2008-3959?

An attacker can exploit CVE-2008-3959 by sending a crafted SQLJRA packet that simulates a V7 client connect/attach request.

Q: What are the consequences of CVE-2008-3959?

Exploitation of CVE-2008-3959 can lead to a crash of the DB2 instance, resulting in a denial of service.

Published Sep 9, 2008

Updated

IBM DB2 UDB 8.1 before FixPak 16, 8.2 before FixPak 9, and 9.1 before FixPak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted SQLJRA packet within a CONNECT/ATTACH data stream that simulates a V7 client connect/attach request.

Affected Software

24 affected components

IBM DB2=8.1-fp1

IBM DB2=8.1-fp10

IBM DB2=8.2-fp7

IBM DB2=8.1-fp2

IBM DB2=8.1-fp5

IBM DB2=8.2-fp5

IBM DB2=8.2-fp3

IBM DB2=8.1-fp8

IBM DB2=8.2-fp2

IBM DB2=8.1-fp14

IBM DB2=8.1-fp11

IBM DB2=8.1-fp7

IBM DB2=8.2-fp6

IBM DB2=8.1-fp12

IBM DB2=8.1-fp4

IBM DB2<=8.2

IBM DB2=8.1-fp6

IBM DB2<=8.1

IBM DB2=8.1-fp13

IBM DB2=8.1-fp3

IBM DB2=8.1-fp9

IBM DB2=8.2-fp1

IBM DB2=8.2

IBM DB2=8.2-fp4

Remediation

Patch Available

http://www-1.ibm.com/support/docview.wss?uid=swg1IZ05043

Event History

Sep 9, 2008

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3959?

CVE-2008-3959 is classified as a denial of service vulnerability.

How do I fix CVE-2008-3959?