製品・ソフトウェアに関する情報

JVN脆弱性詳細

IBM DB2 UDB の JDBC Applet Server Service におけるサービス運用妨害 (DoS) の脆弱性

Title	IBM DB2 UDB の JDBC Applet Server Service におけるサービス運用妨害 (DoS) の脆弱性
Summary	IBM DB2 UDB の JDBC Applet Server Service には、サービス運用妨害 (サービスクラッシュ) 状態となる脆弱性が存在します。
Possible impacts	第三者により、"不正な形式のパケット" を介して、サービス運用妨害 (サービスクラッシュ) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Sept. 4, 2008, midnight
Registration Date	Sept. 25, 2012, 5:17 p.m.
Last Update	Sept. 25, 2012, 5:17 p.m.

Affected System

IBM

db2 universal database Fixpak 17 未満の 8

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2008-3960	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3960
National Vulnerability Database (NVD)
2	CVE-2008-3960	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-3960

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-20	https://jvndb.jvn.jp/ja/cwe/CWE-20.html

ベンダー情報

No	Name	URL
IBM
1	JR29274	http://www-01.ibm.com/support/docview.wss?uid=swg1JR29274

Change Log

No	Changed Details	Date of change
0	[2012年09月25日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2008-3960

Summary	Unspecified vulnerability in the JDBC Applet Server Service (aka db2jds) in IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service (service crash) via "malicious packets."
Publication Date	Sept. 11, 2008, 10:13 a.m.
Registration Date	Jan. 29, 2021, 1:41 p.m.
Last Update	Aug. 8, 2017, 10:32 a.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:ibm:db2_universal_database:8.2:::::::*
cpe:2.3:a:ibm:db2_universal_database:8.2:fp1::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp10::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp11::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp12::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp13::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp14::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp15::::::
cpe:2.3:a:ibm:db2_universal_database::fp16::::::*		8.2
cpe:2.3:a:ibm:db2_universal_database:8.2:fp2::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp3::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp4::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp5::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp6::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp7::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp8::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp9::::::

Related information, measures and tools

No	URL	refsource	タグ
1	ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT	CONFIRM
2	http://osvdb.org/48148	OSVDB
3	http://secunia.com/advisories/31787	SECUNIA	Vendor Advisory
4	http://www.securityfocus.com/bid/31058	BID
5	http://www.securitytracker.com/id?1020826	SECTRACK
6	http://www-01.ibm.com/support/docview.wss?uid=swg21318189	CONFIRM
7	http://www-1.ibm.com/support/docview.wss?uid=swg1JR29274	AIXAPAR
8	https://exchange.xforce.ibmcloud.com/vulnerabilities/44984	XF

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-20	不適切な入力確認	https://cwe.mitre.org/data/definitions/20.html

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:ibm:db2_universal_database:8.2:::::::*
cpe:2.3:a:ibm:db2_universal_database:8.2:fp1::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp10::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp11::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp12::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp13::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp14::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp15::::::
cpe:2.3:a:ibm:db2_universal_database::fp16::::::*		8.2
cpe:2.3:a:ibm:db2_universal_database:8.2:fp2::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp3::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp4::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp5::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp6::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp7::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp8::::::
cpe:2.3:a:ibm:db2_universal_database:8.2:fp9::::::