CVE-2008-3959 : IBM DB2 UDB 8.1 before FixPak 16, 8.2 before FixPak 9, and 9.1 before FixPak 4a

IBM DB2 UDB 8.1 before FixPak 16, 8.2 before FixPak 9, and 9.1 before FixPak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted SQLJRA packet within a CONNECT/ATTACH data stream that simulates a V7 client connect/attach request.

Published 2008-09-11 01:13:48

Updated 2017-08-08 01:32:18

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2008-3959

IBM » DB2 » Update FP8
Versions up to, including, (<=) 8.2
cpe:2.3:a:ibm:db2:*:fp8:*:*:*:*:*:*
Matching versions
IBM » DB2 » Update Fp15
Versions up to, including, (<=) 8.1
cpe:2.3:a:ibm:db2:*:fp15:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update Fp13
cpe:2.3:a:ibm:db2:8.1:fp13:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update Fp14
cpe:2.3:a:ibm:db2:8.1:fp14:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.2 Update FP3
cpe:2.3:a:ibm:db2:8.2:fp3:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.2 Update FP2
cpe:2.3:a:ibm:db2:8.2:fp2:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.2 Update FP1
cpe:2.3:a:ibm:db2:8.2:fp1:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.2
cpe:2.3:a:ibm:db2:8.2:*:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.2 Update FP5
cpe:2.3:a:ibm:db2:8.2:fp5:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.2 Update FP6
cpe:2.3:a:ibm:db2:8.2:fp6:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.2 Update FP4
cpe:2.3:a:ibm:db2:8.2:fp4:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.2 Update FP7
cpe:2.3:a:ibm:db2:8.2:fp7:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update FP3
cpe:2.3:a:ibm:db2:8.1:fp3:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update FP4
cpe:2.3:a:ibm:db2:8.1:fp4:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update Fp11
cpe:2.3:a:ibm:db2:8.1:fp11:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update Fp12
cpe:2.3:a:ibm:db2:8.1:fp12:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update FP7
cpe:2.3:a:ibm:db2:8.1:fp7:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update FP8
cpe:2.3:a:ibm:db2:8.1:fp8:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update FP5
cpe:2.3:a:ibm:db2:8.1:fp5:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update FP6
cpe:2.3:a:ibm:db2:8.1:fp6:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update FP1
cpe:2.3:a:ibm:db2:8.1:fp1:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update FP2
cpe:2.3:a:ibm:db2:8.1:fp2:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update FP9
cpe:2.3:a:ibm:db2:8.1:fp9:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update Fp10
cpe:2.3:a:ibm:db2:8.1:fp10:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2008-3959

Top countries where our scanners detected CVE-2008-3959

Top open port discovered on systems with this issue 50000

IPs affected by CVE-2008-3959 19

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2008-3959!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2008-3959

EPSS FAQ

0.69%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 78 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2008-3959

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

References for CVE-2008-3959

Jump to

Vulnerability Details : CVE-2008-3959

Products affected by CVE-2008-3959

Threat overview for CVE-2008-3959

Exploit prediction scoring system (EPSS) score for CVE-2008-3959

CVSS scores for CVE-2008-3959

References for CVE-2008-3959