CVE-2008-6820

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-06-03 · updated 2026-06-16
Weakness: CWE-16

Description

The db2fmp process in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 on Windows runs with "OS privilege," which has unknown impact and attack vectors, a different vulnerability than CVE-2008-3856.

Affected products

IBM Db2 for Linux, UNIX and Windows: 8.0-fp1, 8.0-fp10, 8.0-fp11, 8.0-fp12, 8.0-fp13, 8.0-fp14 (+9)

References

http://osvdb.org/48149
http://www-01.ibm.com/support/docview.wss?uid=swg1JR30026
http://www-01.ibm.com/support/docview.wss?uid=swg1JR30227
http://www-01.ibm.com/support/docview.wss?uid=swg1JR30228
http://www-01.ibm.com/support/docview.wss?uid=swg21318189
http://www.securityfocus.com/bid/31058
http://osvdb.org/48149
http://www-01.ibm.com/support/docview.wss?uid=swg1JR30026
http://www-01.ibm.com/support/docview.wss?uid=swg1JR30227
http://www-01.ibm.com/support/docview.wss?uid=swg1JR30228

Get alerted when CVE-2008-6820 or the next vulnerability affects your stack