Unscored CVE-2008-0699 EUVD-2008-0709GHSA-xr89-gv52-97x5

Unspecified vulnerability in the ADMIN_SP_C procedure (SYSPROC.ADMIN_SP_C) in IBM DB2 UDB before 8.2 Fixpak 16, 9.1 before FP4a, and 9.5 be…

Published Feb 12, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Unspecified vulnerability in the ADMIN_SP_C procedure (SYSPROC.ADMIN_SP_C) in IBM DB2 UDB before 8.2 Fixpak 16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unspecified attack vectors.

References

20080418 Team SHATTER Security Advisory: IBM DB2 UDB Arbitrary code execution in ADMIN_SP_C/ADMIN_SP_C2 procedures mailing-list
IZ06972 vendor-advisory
IZ06973 vendor-advisory
IZ10917 vendor-advisory
28771 third-party-advisory
ADV-2008-0401 vdb-entry
29784 third-party-advisory
29022 third-party-advisory
http://www.appsecinc.com/resources/alerts/db2/2008-02.shtml
41795 vdb-entry