CVE-2008-4692

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-10-22 · updated 2026-06-16

Description

The Native Managed Provider for .NET component in IBM DB2 8 before FP17, 9.1 before FP6, and 9.5 before FP2, when a definer cannot maintain objects, preserves views and triggers without marking them inoperative or dropping them, which has unknown impact and attack vectors.

Affected products

IBM Db2 for Linux, UNIX and Windows: through 8.0; through 9.1; through 9.5; 8.0-fp1, 8.0-fp10, 8.0-fp11, 8.0-fp12, 8.0-fp13, 8.0-fp14 (+25)

References

http://secunia.com/advisories/31787
http://secunia.com/advisories/32368
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22287
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22306
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22307
http://www-01.ibm.com/support/docview.wss?uid=swg27013892
http://www.vupen.com/english/advisories/2008/2893
https://exchange.xforce.ibmcloud.com/vulnerabilities/46021
http://secunia.com/advisories/31787
http://secunia.com/advisories/32368

Get alerted when CVE-2008-4692 or the next vulnerability affects your stack