CVE-2006-3068

IBM DB2 Universal Database (UDB) before 8.2 FixPak 12 allows remote attackers to cause a denial of service (application crash) by sending "incorrect information ... regarding the package name/creator," which leads to a "memory overwrite."

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/20579	Patch Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IY79204	Patch
http://www.osvdb.org/29862
http://www.vupen.com/english/advisories/2006/2332	Vendor Advisory
http://secunia.com/advisories/20579	Patch Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IY79204	Patch
http://www.osvdb.org/29862
http://www.vupen.com/english/advisories/2006/2332	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*

History

21 Nov 2024, 00:12

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/20579 - Patch, Vendor Advisory~~	() http://secunia.com/advisories/20579 - Patch, Vendor Advisory
References	~~() http://www-1.ibm.com/support/docview.wss?uid=swg1IY79204 - Patch~~	() http://www-1.ibm.com/support/docview.wss?uid=swg1IY79204 - Patch
References	~~() http://www.osvdb.org/29862 -~~	() http://www.osvdb.org/29862 -
References	~~() http://www.vupen.com/english/advisories/2006/2332 - Vendor Advisory~~	() http://www.vupen.com/english/advisories/2006/2332 - Vendor Advisory

Information

Published : 2006-06-19 10:02

Updated : 2024-11-21 00:12

NVD link : CVE-2006-3068

Mitre link : CVE-2006-3068

CVE.ORG link : CVE-2006-3068

JSON object : View

Products Affected

ibm

db2_universal_database

CWE

CWE-399

Resource Management Errors

{"id": "CVE-2006-3068", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-06-19T10:02:00.000", "references": [{"url": "http://secunia.com/advisories/20579", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www-1.ibm.com/support/docview.wss?uid=swg1IY79204", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/29862", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/2332", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/20579", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www-1.ibm.com/support/docview.wss?uid=swg1IY79204", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/29862", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2006/2332", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-399"}]}], "descriptions": [{"lang": "en", "value": "IBM DB2 Universal Database (UDB) before 8.2 FixPak 12 allows remote attackers to cause a denial of service (application crash) by sending \"incorrect information ... regarding the package name/creator,\" which leads to a \"memory overwrite.\""}, {"lang": "es", "value": "IBM DB2 Universal Database (UDB), anterior a v8.2 FixPak 12 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda de aplicaci\u00f3n) mediante el env\u00edo de \"informaci\u00f3n incorrecta ... sobre el nombre del paquete / creador\", que conduce a una \"memoria sobrescribir\"."}], "lastModified": "2024-11-21T00:12:44.663", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3DC757E1-EC37-48C5-BE72-53184624ACDC"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}