Db2 Universal Database
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:aix:*:*:*:*:*
part: a version: 9.1 update: fp4a
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Db2 Universal Database (f99543c7-2991-55c1-a7d8-0c7dca8462e1) |
| Edition | aix |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-3858 |
vulnerable | 2026-06-08 04:50:36.983371 |
Details available
The Downlevel DB2RA Support component in IBM DB2 9.1 before Fixpak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT data stream that simulates a V7 client connect request.
Published: 2008-08-28T17:00:00.000Z
Updated: 2024-08-07T09:53:00.430Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3857 |
vulnerable | 2026-06-08 04:50:36.982555 |
Details available
The Base Service Utilities component in IBM DB2 9.1 before Fixpak 5 retains a cleartext password in memory after the database connection that sent the password is fully established, which might allow local users to obtain sensitive information by reading a memory dump.
Published: 2008-08-28T17:00:00.000Z
Updated: 2024-08-07T09:53:00.417Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3855 |
vulnerable | 2026-06-08 04:50:36.915628 |
Details available
Unspecified vulnerability in the DB2 Administration Server (DAS) in the Core DAS function component in IBM DB2 9.1 before Fixpak 5 allows local users to gain privileges, aka a "FILE CREATION VULNERABILITY." NOTE: this may be the same as CVE-2007-5664.
Published: 2008-08-28T17:00:00.000Z
Updated: 2024-08-07T09:53:00.634Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3854 |
vulnerable | 2026-06-08 04:50:36.910867 |
Details available
Multiple stack-based buffer overflows in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 1 allow remote attackers to cause a denial of service (system outage) via vectors related to (1) use of XQuery to issue statements; the (2) XMLQUERY, (3) XMLEXISTS, and (4) XMLTABLE statements; and the (5) sqlrlaka function.
Published: 2008-08-28T17:00:00.000Z
Updated: 2024-08-07T09:53:00.407Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.