IBM DB2 Content Manager Multiple Denial of Service Vulnerabilities

Bugtraq ID:	15376
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Nov 10 2005 12:00AM
Updated:	Nov 10 2005 12:00AM
Credit:	Reported by vendor.
Vulnerable:	IBM DB2 Content Manager 8.2 Fix Pack 9 IBM DB2 Content Manager 8.2 Fix Pack 8 IBM DB2 Content Manager 8.2 Fix Pack 7 IBM DB2 Content Manager 8.2 Fix Pack 6 IBM DB2 Content Manager 8.2 Fix Pack 5 IBM DB2 Content Manager 8.2 Fix Pack 4 IBM DB2 Content Manager 8.2 Fix Pack 3 IBM DB2 Content Manager 8.2 Fix Pack 2 IBM DB2 Content Manager 8.2 Fix Pack 1
Not Vulnerable:	IBM DB2 Content Manager 8.2 Fix Pack 10

IBM DB2 Content Manager Multiple Denial of Service Vulnerabilities

IBM DB2 Content Manager is prone to multiple vulnerabilities. These issues may allow attackers to carry out denial of service attacks.

The vulnerabilities affect versions prior to Content Manager Version 8.2 Fix Pack 10.

IBM DB2 Content Manager Multiple Denial of Service Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

IBM DB2 Content Manager Multiple Denial of Service Vulnerabilities

Solution:
IBM has released an advisory and Content Manager Version 8.2 Fix Pack 10 to address these issues. Please see references for more information.

IBM DB2 Content Manager Multiple Denial of Service Vulnerabilities

References:

• IBM DB2 Content Manager Version 8 Release 2 Fix Pack Readme (IBM)
  
• IO00737: CORRUPTED EXEL FILE WILL CAUSE TEXT SEARCH PROCESS LOOPING (IBM)