Unrated severityNVD Advisory· Published Oct 23, 2007· Updated Apr 23, 2026

CVE-2007-5652

Description

IBM DB2 UDB 9.1 before Fixpak 4 does not properly manage storage of a list containing authentication information, which might allow attackers to cause a denial of service (instance crash) or trigger memory corruption. NOTE: the vendor description of this issue is too vague to be certain that it is security-related.

Affected products

IBM/Db25 versions
cpe:2.3:a:ibm:db2:*:fp3a:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:ibm:db2:*:fp3a:*:*:*:*:*:*range: <=9.1
- cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2:9.1:fp2a:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/27177nvdPatchVendor Advisory
www-1.ibm.com/support/docview.wssnvdPatch
www.vupen.com/english/advisories/2007/3538nvdVendor Advisory
www.vupen.com/english/advisories/2007/3867nvdVendor Advisory
www-1.ibm.com/support/docview.wssnvd
www.ibm.com/support/docview.wssnvd
www.securityfocus.com/bid/26450nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000