IBM DB2 Universal Database Multiple Vulnerabilities

Bugtraq ID:	27870
Class:	Unknown
CVE:	CVE-2007-5758 CVE-2007-5664
Remote:	No
Local:	Yes
Published:	Feb 15 2008 12:00AM
Updated:	Apr 18 2008 12:28AM
Credit:	The vendor reported these issues.
Vulnerable:	IBM DB2 Universal Database for Windows 8.0 IBM DB2 Universal Database for Solaris 8.0 IBM DB2 Universal Database for Solaris 9.1 FixPak 4 IBM DB2 Universal Database for Solaris 9.1 FixPak 3 IBM DB2 Universal Database for Solaris 9.1 FixPack 2 IBM DB2 Universal Database for Solaris 9.1 IBM DB2 Universal Database for Linux 8.0 IBM DB2 Universal Database for Linux 9.1 FixPak 4 IBM DB2 Universal Database for Linux 9.1 FixPak 3 IBM DB2 Universal Database for Linux 9.1 FixPack 2 IBM DB2 Universal Database for Linux 9.1 IBM DB2 Universal Database for HP-UX 9.1 Fixpak 4 IBM DB2 Universal Database for HP-UX 9.1 FixPak 3 IBM DB2 Universal Database for HP-UX 9.1 FixPack 2 IBM DB2 Universal Database for HP-UX 9.1 IBM DB2 Universal Database for AIX 9.1 FixPak 4 IBM DB2 Universal Database for AIX 9.1 FixPak 3 IBM DB2 Universal Database for AIX 9.1 FixPack 2 IBM DB2 Universal Database for AIX 9.1 IBM DB2 Universal Database 9.5
Not Vulnerable:	IBM DB2 Universal Database for Solaris 9.1 FixPak 4a IBM DB2 Universal Database for Linux 9.1 FixPak 4a IBM DB2 Universal Database for HP-UX 9.1 FixPak 4a IBM DB2 Universal Database for AIX 9.1 FixPak 4a IBM DB2 Universal Database 9.5 Fix Pack 1 IBM DB2 Universal Database 8.0.0 FixPak 16

IBM DB2 Universal Database Multiple Vulnerabilities

Currently we are not aware of any working exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM DB2 Universal Database Multiple Vulnerabilities

Solution:
IBM has released updates. Please see the references for more information.

IBM DB2 Universal Database Multiple Vulnerabilities

References:

• DB2 Technical Support (IBM)
  
• DB2 Version 9.1 fix packs and clients (IBM)
  
• DB2 Version 9.5 fix packs and clients (IBM)
  
• IBM DB2 Universal Database Administration Server File Creation Vulnerability (iDefense Labs)
  
• DB2 Version 9.1 for Linux, UNIX and Windows APARs by fix pack (IBM)
  
• IBM DB2 Universal Database db2dasStartStopFMDaemon Buffer Overflow Vulnerability (iDefense Labs)