IBM DB2 Administration Server (DAS) Buffer Overflow Vulnerability

IBM DB2 is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

The following versions of DB2 are vulnerable:

DB2 9.1 prior to Fix Pack 10
DB2 9.5 prior to Fix Pack 7
DB2 9.7 prior to Fix Pack 3


 

Privacy Statement
Copyright 2010, SecurityFocus