ID CVE-2007-6052
Summary IBM DB2 UDB 9.1 before Fixpak 4 does not properly perform vector aggregation, which might allow attackers to cause a denial of service (divide-by-zero error and DBMS crash), related to an "overflow." NOTE: the vendor description of this issue is too vague to be certain that it is security-related.
References
Vulnerable Configurations
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
  • cpe:2.3:o:unix:unix:*:*:*:*:*:*:*:*
    cpe:2.3:o:unix:unix:*:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2_universal_database:*:*:fp3a:*:*:*:*:*
    cpe:2.3:a:ibm:db2_universal_database:*:*:fp3a:*:*:*:*:*
CVSS
Base: 7.8 (as of 08-03-2011 - 03:01)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
refmap via4
aixapar IZ08205
bid 26450
confirm http://www-1.ibm.com/support/docview.wss?uid=swg21255607
vupen ADV-2007-3867
Last major update 08-03-2011 - 03:01
Published 20-11-2007 - 20:46
Last modified 08-03-2011 - 03:01
Back to Top