CVE-2008-3858

Published: Aug 28, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The Downlevel DB2RA Support component in IBM DB2 9.1 before Fixpak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT data stream that simulates a V7 client connect request.

Affected (21)

Products: Ibm: Db2 Universal Database

Ibm

1 product

Db2 Universal Database

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Ibm Db2 Universal Database	Version 9.1
Ibm Db2 Universal Database	Version 9.1
Ibm Db2 Universal Database	Version 9.1
Ibm Db2 Universal Database	Version 9.1
Ibm Db2 Universal Database	Version 9.1
Ibm Db2 Universal Database	Version 9.1 fp2
Ibm Db2 Universal Database	Version 9.1 fp2
Ibm Db2 Universal Database	Version 9.1 fp2
Ibm Db2 Universal Database	Version 9.1 fp2
Ibm Db2 Universal Database	Version 9.1 fp2
Ibm Db2 Universal Database	Version 9.1 fp3
Ibm Db2 Universal Database	Version 9.1 fp3
Ibm Db2 Universal Database	Version 9.1 fp3
Ibm Db2 Universal Database	Version 9.1 fp3
Ibm Db2 Universal Database	Version 9.1 fp3
Ibm Db2 Universal Database	Version 9.1 fp4
Ibm Db2 Universal Database	Version 9.1 fp4
Ibm Db2 Universal Database	Version 9.1 fp4
Ibm Db2 Universal Database	Version 9.1 fp4
Ibm Db2 Universal Database	Version 9.1 fp4
Ibm Db2 Universal Database	Version 9.1 fp4a