RCE in IBM Db2

CVE-2008-1997

Unspecified vulnerability in the ADMIN_SP_C2 procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unknown vectors. NOTE: the ADMIN_SP_C issue is already covered by CVE-2008-0699.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.044 (90.4th percentile) — read the EPSS interpretation.

Affected products

  • Ibm Db2 — versions 8.0, 9.1, 9.5
  • N/a — versions n/a

Weakness classification (CWE)

References

  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory)
  • cve@mitre.org (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
  • cve@mitre.org (x_refsource_SECUNIA, Not Applicable, third-party-advisory)
  • cve@mitre.org (x_refsource_MISC, Not Applicable)
  • cve@mitre.org (Third Party Advisory, Issue Tracking, x_refsource_SREASON, third-party-advisory)