VULNERABILITY INTELLIGENCE
CVE-2008-3853
CVSS score9.3 HIGH
EPSS probability5.77%
CISA KEVNot currently listed
Published2008-08-28
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Buffer overflow in the DAS server program in the Core DAS function component in IBM DB2 9.1 before FP4a and 9.5 before FP1 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via unspecified vectors. NOTE: this might be related to CVE-2007-3676.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer