Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-3855

Опубликовано: 28 авг. 2008
Источник: nvd
CVSS2: 4.6
EPSS Низкий

Описание

Unspecified vulnerability in the DB2 Administration Server (DAS) in the Core DAS function component in IBM DB2 9.1 before Fixpak 5 allows local users to gain privileges, aka a "FILE CREATION VULNERABILITY." NOTE: this may be the same as CVE-2007-5664.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:db2_universal_database:9.1:*:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:*:hp_ux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:*:linux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:*:solaris:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:*:windows:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:hp-ux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:linux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:solaris:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:windows:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:hp-ux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:linux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:solaris:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:windows:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:hp-ux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:linux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:solaris:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:windows:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:hp-ux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:linux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:solaris:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:windows:*:*:*:*:*

EPSS

Процентиль: 19%
0.00062
Низкий

4.6 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

github
почти 4 года назад

Unspecified vulnerability in the DB2 Administration Server (DAS) in the Core DAS function component in IBM DB2 9.1 before Fixpak 5 allows local users to gain privileges, aka a "FILE CREATION VULNERABILITY." NOTE: this may be the same as CVE-2007-5664.

EPSS

Процентиль: 19%
0.00062
Низкий

4.6 Medium

CVSS2

Дефекты

CWE-264