CVE-2008-3852 : Unspecified vulnerability in the CLR stored procedure deployment from IBM Databa

Unspecified vulnerability in the CLR stored procedure deployment from IBM Database Add-Ins for Visual Studio in the Visual Studio Net component in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 2 allows remote authenticated users to execute arbitrary code via unknown vectors.

Published 2008-08-28 17:41:00

Updated 2018-10-11 20:50:01

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2008-3852

IBM » Db2 Universal Database » Update FP1 Hp-ux Edition
Versions up to, including, (<=) 9.5
cpe:2.3:a:ibm:db2_universal_database:*:fp1:hp-ux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Update FP1 Linux Edition
Versions up to, including, (<=) 9.5
cpe:2.3:a:ibm:db2_universal_database:*:fp1:linux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Update Fp4a Windows Edition
Versions up to, including, (<=) 9.1
cpe:2.3:a:ibm:db2_universal_database:*:fp4a:windows:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Update Fp4a Linux Edition
Versions up to, including, (<=) 9.1
cpe:2.3:a:ibm:db2_universal_database:*:fp4a:linux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Update Fp4a Hp-ux Edition
Versions up to, including, (<=) 9.1
cpe:2.3:a:ibm:db2_universal_database:*:fp4a:hp-ux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Update Fp4a AIX Edition
Versions up to, including, (<=) 9.1
cpe:2.3:a:ibm:db2_universal_database:*:fp4a:aix:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Update FP1 Solaris Edition
Versions up to, including, (<=) 9.5
cpe:2.3:a:ibm:db2_universal_database:*:fp1:solaris:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Update FP1 AIX Edition
Versions up to, including, (<=) 9.5
cpe:2.3:a:ibm:db2_universal_database:*:fp1:aix:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Update FP1 Windows Edition
Versions up to, including, (<=) 9.5
cpe:2.3:a:ibm:db2_universal_database:*:fp1:windows:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Update Fp4a Solaris Edition
Versions up to, including, (<=) 9.1
cpe:2.3:a:ibm:db2_universal_database:*:fp4a:solaris:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP2 Windows Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:windows:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP3 AIX Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:aix:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP4 Linux Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:linux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP4 Solaris Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:solaris:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP4 Windows Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:windows:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 AIX Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:*:aix:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Linux Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:*:linux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Hp-ux Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:*:hp-ux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP2 Linux Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:linux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP2 Solaris Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:solaris:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP4 AIX Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:aix:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP4 Hp-ux Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:hp-ux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.5 AIX Edition
cpe:2.3:a:ibm:db2_universal_database:9.5:*:aix:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.5 Solaris Edition
cpe:2.3:a:ibm:db2_universal_database:9.5:*:solaris:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.5 Windows Edition
cpe:2.3:a:ibm:db2_universal_database:9.5:*:windows:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP3 Hp-ux Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:hp-ux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP3 Linux Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:linux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Solaris Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:*:solaris:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Windows Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:*:windows:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP2 AIX Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:aix:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP2 Hp-ux Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:hp-ux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP3 Solaris Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:solaris:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP3 Windows Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:windows:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.5 Hp-ux Edition
cpe:2.3:a:ibm:db2_universal_database:9.5:*:hp-ux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.5 Linux Edition
cpe:2.3:a:ibm:db2_universal_database:9.5:*:linux:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2008-3852

EPSS FAQ

2.43%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 90 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2008-3852

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P	8.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

CWE ids for CVE-2008-3852

CWE-264

Assigned by: nvd@nist.gov (Primary)

References for CVE-2008-3852

Jump to

Vulnerability Details : CVE-2008-3852

Products affected by CVE-2008-3852

Exploit prediction scoring system (EPSS) score for CVE-2008-3852

CVSS scores for CVE-2008-3852

CWE ids for CVE-2008-3852

References for CVE-2008-3852