ID de Prueba:	1.3.6.1.4.1.25623.1.0.900215
Categoría:	Databases
Título:	IBM Db2 Universal Database Multiple Vulnerabilities - Sept08 (Windows)
Resumen:	IBM Db2 is prone to multiple vulnerabilities.
Descripción:	Summary: IBM Db2 is prone to multiple vulnerabilities. Vulnerability Insight: The flaws exist due to unspecified errors in processing of - CONNECT/ATTACH requests - DB2FMP process and DB2JDS service Vulnerability Impact: Remote exploitation could allow attackers to bypass security restrictions, cause a denial of service or gain elevated privileges. Affected Software/OS: IBM DB2 version 8 prior to Fixpak 17 on Windows (All). Solution: Update to version 8 Fixpak 17 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	BugTraq ID: 31058 Common Vulnerability Exposure (CVE) ID: CVE-2008-2154 AIX APAR: IZ21983 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ21983 AIX APAR: IZ22142 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22142 AIX APAR: IZ22143 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22143 BugTraq ID: 35409 http://www.securityfocus.com/bid/35409 http://osvdb.org/48147 http://secunia.com/advisories/31787 XForce ISS Database: db2-installjar-priv-escalation(51105) https://exchange.xforce.ibmcloud.com/vulnerabilities/51105 Common Vulnerability Exposure (CVE) ID: CVE-2008-3958 AIX APAR: IZ08134 http://www-1.ibm.com/support/docview.wss?uid=swg1IZ08134 http://www.securityfocus.com/bid/31058 http://osvdb.org/48144 XForce ISS Database: ibm-db2-connect-attach-dos1(45133) https://exchange.xforce.ibmcloud.com/vulnerabilities/45133 Common Vulnerability Exposure (CVE) ID: CVE-2008-3960 AIX APAR: JR29274 http://www-1.ibm.com/support/docview.wss?uid=swg1JR29274 http://osvdb.org/48148 http://www.securitytracker.com/id?1020826 XForce ISS Database: db2-db2jds-dos(44984) https://exchange.xforce.ibmcloud.com/vulnerabilities/44984
Copyright	Copyright (C) 2008 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.