CVE-2006-6638

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2006-6638
IBM DB2 8.1 before FixPak 14 allows remote attackers to cause a denial of service via a crafted SQLJRA packet, which causes a NULL pointer dereference in the sqle_db2ra_as_recvrequest function in DB2ENGN.DLL, a different issue than CVE-2006-4257.

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://secunia.com/advisories/23397 Patch Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IY91847 Patch
http://www.appsecinc.com/resources/alerts/db2/2006-11-30.shtml Patch Vendor Advisory
http://www.securityfocus.com/bid/21646 Patch
http://secunia.com/advisories/23397 Patch Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IY91847 Patch
http://www.appsecinc.com/resources/alerts/db2/2006-11-30.shtml Patch Vendor Advisory
http://www.securityfocus.com/bid/21646 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1.6c:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1.7b:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1.8a:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1.9:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1.9a:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.10:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.12:*:*:*:*:*:*:*
History

21 Nov 2024, 00:23

Type Values Removed Values Added
References () http://secunia.com/advisories/23397 - Patch, Vendor Advisory () http://secunia.com/advisories/23397 - Patch, Vendor Advisory
References () http://www-1.ibm.com/support/docview.wss?uid=swg1IY91847 - Patch () http://www-1.ibm.com/support/docview.wss?uid=swg1IY91847 - Patch
References () http://www.appsecinc.com/resources/alerts/db2/2006-11-30.shtml - Patch, Vendor Advisory () http://www.appsecinc.com/resources/alerts/db2/2006-11-30.shtml - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/21646 - Patch () http://www.securityfocus.com/bid/21646 - Patch
Information

Published : 2006-12-19 20:28

Updated : 2024-11-21 00:23

NVD link : CVE-2006-6638

Mitre link : CVE-2006-6638

CVE.ORG link : CVE-2006-6638

JSON object : View

Products Affected

ibm

  • db2_universal_database
CWE
NVD-CWE-Other