CVE:CVE-2008-1997
CNNVD:CNNVD-200804-415
FP16以前的IBM DB2 8, FP4a以前的9.1, 以及FP1以前的9.5的ADMIN_SP_C2 procedure中存在未明漏洞，该漏洞会允许远程验证用户通过未明向量来执行任意代码。
solution:Upgrade ibm db2 to a higher version than 8.0,8.0:fixpak1,8.0:fixpak10,8.0:fixpak11,8.0:fixpak12,8.0:fixpak13,8.0:fixpak14,8.0:fixpak15,8.0:fixpak2,8.0:fixpak3,8.0:fixpak4,8.0:fixpak5,8.0:fixpak6,8.0:fixpak6a,8.0:fixpak6b,8.0:fixpak6c,8.0:fixpak7,8.0:fixpak7a,8.0:fixpak7b,8.0:fixpak8,8.0:fixpak8a,8.0:fixpak9,8.0:fixpak9a,9.1,9.1:fp1,9.1:fp2,9.1:fp2a,9.1:fp3,9.1:fp3a,9.1:fp4,9.5,and avoid the version 8.0,8.0:fixpak1,8.0:fixpak10,8.0:fixpak11,8.0:fixpak12,8.0:fixpak13,8.0:fixpak14,8.0:fixpak15,8.0:fixpak2,8.0:fixpak3,8.0:fixpak4,8.0:fixpak5,8.0:fixpak6,8.0:fixpak6a,8.0:fixpak6b,8.0:fixpak6c,8.0:fixpak7,8.0:fixpak7a,8.0:fixpak7b,8.0:fixpak8,8.0:fixpak8a,8.0:fixpak9,8.0:fixpak9a,9.1,9.1:fp1,9.1:fp2,9.1:fp2a,9.1:fp3,9.1:fp3a,9.1:fp4,9.5