BID:11089

IBM DB2 Universal Database REC2XML and GENERATE_DISTFILE Buffer Overflow Vulnerabilities

Info

IBM DB2 Universal Database REC2XML and GENERATE_DISTFILE Buffer Overflow Vulnerabilities

Bugtraq ID:	11089
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 01 2004 12:00AM
Updated:	Sep 01 2004 12:00AM
Credit:	Discovery of these vulnerabilities is credited to "NGSSoftware Insight Security Research" <[email protected]>.
Vulnerable:	IBM DB2 Universal Database for Windows 8.1 IBM DB2 Universal Database for Windows 7.2 IBM DB2 Universal Database for Windows 7.1 IBM DB2 Universal Database for Solaris 8.1 IBM DB2 Universal Database for Solaris 7.2 IBM DB2 Universal Database for Solaris 7.1 IBM DB2 Universal Database for Solaris 7.0 IBM DB2 Universal Database for Linux 8.1 IBM DB2 Universal Database for Linux 7.2 IBM DB2 Universal Database for Linux 7.1 IBM DB2 Universal Database for Linux 7.0 IBM DB2 Universal Database for HP-UX 8.1 IBM DB2 Universal Database for HP-UX 7.2 IBM DB2 Universal Database for HP-UX 7.1 IBM DB2 Universal Database for HP-UX 7.0 IBM DB2 Universal Database for AIX 8.1 IBM DB2 Universal Database for AIX 7.2 IBM DB2 Universal Database for AIX 7.1 IBM DB2 Universal Database for AIX 7.0

Not Vulnerable:

Discussion

IBM DB2 Universal Database REC2XML and GENERATE_DISTFILE Buffer Overflow Vulnerabilities

IBM DB2 Universal Database is reported prone to multiple remote buffer overflow vulnerabilities. These issues arise because the application does not perform proper boundary checks before copying user-supplied data in to process buffers. An attacker may exploit these issues to execute arbitrary code on a vulnerable computer.

The first issue exists in the 'rec2xml' function and the second issue affects the 'generate_distfile' procedure.

An attacker may exploit these issues by supplying a large string value to the application. This payload may contain replacement memory addresses and shellcode designed to redirect process execution. If successful, these issues may result in a denial of service condition or allow for arbitrary code execution. As a result the attacker may gain unauthorized access to a vulnerable computer.

These issues were originally reported as unspecified vulnerabilities. Due to the availability of new information, this BID is being updated. Individuals BID will be created in the near future.

Exploit / POC

IBM DB2 Universal Database REC2XML and GENERATE_DISTFILE Buffer Overflow Vulnerabilities

The researchers responsible for discovering these issues have likely developed exploit code to trigger these vulnerabilities. These exploits have not been released to the public.

Solution / Fix

IBM DB2 Universal Database REC2XML and GENERATE_DISTFILE Buffer Overflow Vulnerabilities

Solution:
The vendor has released Fixpaks to address these vulnerabilities:

IBM DB2 Universal Database for Solaris 7.0