CVE-2008-2154
03.06.2009, 21:00
IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 provides an INSTALL_JAR (aka sqlj.install_jar) procedure, which allows remote authenticated users to create or overwrite arbitrary files via unspecified calls.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ibm | db2 | 8.0:fp1 |
| ibm | db2 | 8.0:fp10 |
| ibm | db2 | 8.0:fp11 |
| ibm | db2 | 8.0:fp12 |
| ibm | db2 | 8.0:fp13 |
| ibm | db2 | 8.0:fp14 |
| ibm | db2 | 8.0:fp15 |
| ibm | db2 | 8.0:fp16 |
| ibm | db2 | 9.1:fp1 |
| ibm | db2 | 9.1:fp2 |
| ibm | db2 | 9.1:fp3 |
| ibm | db2 | 9.1:fp3a |
| ibm | db2 | 9.1:fp4 |
| ibm | db2 | 9.1:fp4a |
| ibm | db2 | 9.5:fp1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References