CVE-2008-0699

Unspecified vulnerability in the ADMIN_SP_C procedure (SYSPROC.ADMIN_SP_C) in IBM DB2 UDB before 8.2 Fixpak 16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unspecified attack vectors.

• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXTVendor Advisory
• http://osvdb.org/41795Broken Link
• http://secunia.com/advisories/28771Third Party Advisory
• http://secunia.com/advisories/29022Third Party Advisory
• http://secunia.com/advisories/29784Third Party Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06972Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06973Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ10917Patch, Vendor Advisory
• http://www.appsecinc.com/resources/alerts/db2/2008-02.shtmlThird Party Advisory
• http://www.securityfocus.com/archive/1/491075/100/0/threadedThird Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2008/0401Third Party Advisory
• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXTVendor Advisory
• http://osvdb.org/41795Broken Link
• http://secunia.com/advisories/28771Third Party Advisory
• http://secunia.com/advisories/29022Third Party Advisory
• http://secunia.com/advisories/29784Third Party Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06972Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06973Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ10917Patch, Vendor Advisory
• http://www.appsecinc.com/resources/alerts/db2/2008-02.shtmlThird Party Advisory
• http://www.securityfocus.com/archive/1/491075/100/0/threadedThird Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2008/0401Third Party Advisory

Published

Feb 12, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-0693Stack-based buffer overflow in PQCore.exe in Print Manager P…
• CVE-2008-0694Cross-site scripting (XSS) vulnerability in the HTTP Server …
• CVE-2008-0695SQL injection vulnerability in index.php in BookmarkX script…
• CVE-2008-0696IBM DB2 UDB before 8.2 Fixpak 16 does not properly check aut…
• CVE-2008-0697Unspecified vulnerability in DB2PD in IBM DB2 UDB before 8.2…
• CVE-2008-0698Buffer overflow in the DAS server in IBM DB2 UDB before 8.2 …
• CVE-2008-0700Cross-site scripting (XSS) vulnerability in search.php in Cr…
• CVE-2008-0701ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not…
• CVE-2008-0702Multiple heap-based buffer overflows in Titan FTP Server 6.0…
• CVE-2008-0703Multiple directory traversal vulnerabilities in sflog! 0.96 …
• CVE-2008-0704Unspecified vulnerability in the SSH server in HP OpenVMS TC…
• CVE-2008-0705Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…