← Database

CVE-2008-1998

HIGH CVSS: 8.5 Published: 2008-04-28 Modified: 2026-06-16

Description

The NNSTAT (aka SYSPROC.NNSTAT) procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 on Windows allows remote authenticated users to overwrite arbitrary files via the log file parameter.

Affected Platforms

Microsoft WindowsIbm Db2

Weakness Type

CWE-264

References