CVE-2008-2154

IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 provides an INSTALL_JAR (aka sqlj.install_jar) procedure, which allows remote authenticated users to create or overwrite arbitrary files via unspecified calls.

• CWE-16

• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXTPatch, Vendor Advisory
• http://osvdb.org/48147
• http://secunia.com/advisories/31787Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ21983Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22142Patch, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22143Patch, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21318189Patch
• http://www.securityfocus.com/bid/35409
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51105
• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXTPatch, Vendor Advisory
• http://osvdb.org/48147
• http://secunia.com/advisories/31787Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ21983Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22142Patch, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22143Patch, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21318189Patch
• http://www.securityfocus.com/bid/35409
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51105

Published

Jun 3, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-2145Stack-based buffer overflow in Novell Client 4.91 SP4 and ea…
• CVE-2008-2146wp-includes/vars.php in Wordpress before 2.2.3 does not prop…
• CVE-2008-2147Untrusted search path vulnerability in VideoLAN VLC before 0…
• CVE-2008-2148The utimensat system call (sys_utimensat) in Linux kernel 2.…
• CVE-2008-2149Stack-based buffer overflow in the searchwn function in Word…
• CVE-2008-2152Integer overflow in the rtl_allocateMemory function in sal/r…
• CVE-2008-2157robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for W…
• CVE-2008-2158Multiple stack-based buffer overflows in the Command Line In…
• CVE-2008-2159Microsoft Internet Explorer 7 can save encrypted pages in th…
• CVE-2008-2160Multiple unspecified vulnerabilities in the JPEG (GDI+) and …
• CVE-2008-2161Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, an…
• CVE-2008-2162Cross-site scripting (XSS) vulnerability in SonicWall Email …