IBM DB2 < 8.2 Multiple Vulnerabilities (2) (deprecated)

critical Nessus Network Monitor Plugin ID 2349

Synopsis

The remote host is vulnerable to multiple flaws which impact confidentiality, integrity, and availability.

Description

The remote host is running an IBM DB/2 Universal Database Server. It is reported that versions up to 8.2 may be vulnerable to multiple remote overflows. IBM DB/2 passes database versions over the network. NNM has noted that the DB/2 version is less than 8.2.

Solution

Upgrade to version 8.2 or higher.

Plugin Details

Severity: Critical

ID: 2349

Family: Database

Published: 10/5/2004

Updated: 3/6/2019

Nessus ID: 15486

Risk Information

VPR

Risk Factor: High

Score: 8.2

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Reference Information

CVE: CVE-2004-1372, CVE-2005-0417, CVE-2005-4735, CVE-2005-4736, CVE-2005-4737, CVE-2005-4738, CVE-2005-4739, CVE-2005-4740, CVE-2005-4863, CVE-2005-4864, CVE-2005-4865, CVE-2005-4866, CVE-2005-4867, CVE-2005-4868, CVE-2005-4869, CVE-2005-4870, CVE-2005-4871

BID: 11089, 11327, 12508, 12509, 12510, 12511, 12514, 12512, 11390, 11396, 11397, 11398, 11399, 11400, 11401, 11402, 11403, 11404, 11405, 12170, 15126

Detections

Analytics