CVE-2008-0699

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-02-12 · updated 2026-06-16

Description

Unspecified vulnerability in the ADMIN_SP_C procedure (SYSPROC.ADMIN_SP_C) in IBM DB2 UDB before 8.2 Fixpak 16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unspecified attack vectors.

Affected products

IBM Db2 for Linux, UNIX and Windows: 8.2-fp1, 8.2-fp10, 8.2-fp11, 8.2-fp12, 8.2-fp13, 8.2-fp14 (+18)

References

http://osvdb.org/41795
http://secunia.com/advisories/28771
http://secunia.com/advisories/29022
http://secunia.com/advisories/29784
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06972
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06973
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ10917
http://www.appsecinc.com/resources/alerts/db2/2008-02.shtml
http://www.securityfocus.com/archive/1/491075/100/0/threaded
http://www.vupen.com/english/advisories/2008/0401

Get alerted when CVE-2008-0699 or the next vulnerability affects your stack