What is CVE-2007-3676?

CVE-2007-3676 is a vulnerability in Ibm Db2, classified under CWE-399. Published 2008-02-13.

Is CVE-2007-3676 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Ibm Db2

CVE-2007-3676

IBM DB2 Universal Database (UDB) Administration Server (DAS) 8 before Fix Pack 16 and 9 before Fix Pack 4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via modified pointer values in unspecified remote administration requests, which triggers memory corruption or other invalid memory access. NOTE: this might be the same issue as CVE-2008-0698.

EPSS: 0.043 (90.2th percentile) — read the EPSS interpretation.

Affected products

Ibm Db2
N/a — versions n/a

Weakness classification (CWE)

CWE-399

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (x_refsource_IDEFENSE, Patch, third-party-advisory)

Frequently asked questions

What is CVE-2007-3676?: CVE-2007-3676 is a vulnerability in Ibm Db2, classified under CWE-399. Published 2008-02-13.
Is CVE-2007-3676 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.