IBM DB2 9.1 < Fix Pack 6 Multiple Vulnerabilities

high Nessus Plugin ID 34475


The remote database server is affected by multiple vulnerabilities.


According to its version, the installation of IBM DB2 9.1 running on the remote host is affected by one or more of the following issues :

- An unspecified error in 'SQLNLS_UNPADDEDCHARLEN()' may lead to a segmentation fault in the DB2 server.

- DB2 does not mark inoperative or drop views and triggers if the definer cannot maintain the objects. (IZ22306)

- Password-related connection string keyword values may appear in trace output. (IZ23915)


Apply IBM DB2 version 9.1 Fix Pack 6 or later.

See Also

Plugin Details

Severity: High

ID: 34475

File Name: db2_9fp6.nasl

Version: 1.17

Type: remote

Family: Databases

Published: 10/22/2008

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information


Risk Factor: Medium

Score: 5.9


Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P


Risk Factor: High

Base Score: 7.3

Temporal Score: 6.4

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:ibm:db2

Exploit Ease: No known exploits are available

Reference Information

CVE: CVE-2008-4691, CVE-2008-4692, CVE-2008-4693

BID: 31856

CWE: 200

SECUNIA: 32368