IBM DB2 'NNSTAT' Procedure Arbitrary File Overwrite Vulnerability

Bugtraq ID:	28836
Class:	Design Error
CVE:	CVE-2008-1998
Remote:	No
Local:	Yes
Published:	Apr 18 2008 12:00AM
Updated:	May 07 2015 05:29PM
Credit:	Cesar Cerrudo of Application Security Inc
Vulnerable:	IBM DB2 Universal Database for Windows 8.0 IBM DB2 Universal Database for Windows 9.5 IBM DB2 Universal Database for Windows 9.1 FixPak 4 IBM DB2 Universal Database for Windows 9.1 FixPak 3 IBM DB2 Universal Database for Windows 9.1 FixPack 2 IBM DB2 Universal Database for Windows 9.1 IBM DB2 Universal Database for Windows 8.1 FixPak 15 IBM DB2 Universal Database for Windows 8.1 FixPak 14 IBM DB2 Universal Database for Windows 8.0 FixPak 13 IBM DB2 Universal Database for Solaris 8.0 IBM DB2 Universal Database for Solaris 9.5 IBM DB2 Universal Database for Solaris 9.1 FixPak 4 IBM DB2 Universal Database for Solaris 9.1 FixPak 3 IBM DB2 Universal Database for Solaris 9.1 FixPack 2 IBM DB2 Universal Database for Solaris 9.1 IBM DB2 Universal Database for Solaris 9.0.0 Fixpak 1 IBM DB2 Universal Database for Solaris 8.0 FixPak 13 IBM DB2 Universal Database for Linux 8.0 IBM DB2 Universal Database for Linux 9.5 IBM DB2 Universal Database for Linux 9.1 FixPak 4 IBM DB2 Universal Database for Linux 9.1 FixPak 3 IBM DB2 Universal Database for Linux 9.1 FixPack 2 IBM DB2 Universal Database for Linux 8.0 FixPak 13 IBM DB2 Universal Database for HP-UX 8.0 IBM DB2 Universal Database for HP-UX 9.5 IBM DB2 Universal Database for HP-UX 9.1 Fixpak 4 IBM DB2 Universal Database for HP-UX 9.1 FixPak 3 IBM DB2 Universal Database for HP-UX 9.1 FixPack 2 IBM DB2 Universal Database for HP-UX 9.1 IBM DB2 Universal Database for HP-UX 8.1 FixPak 15 IBM DB2 Universal Database for HP-UX 8.1 FixPak 14 IBM DB2 Universal Database for HP-UX 8.0 FixPak 13 IBM DB2 Universal Database for AIX 8.0 IBM DB2 Universal Database for AIX 9.5 IBM DB2 Universal Database for AIX 9.1 FixPak 4 IBM DB2 Universal Database for AIX 9.1 FixPak 3 IBM DB2 Universal Database for AIX 9.1 FixPack 2 IBM DB2 Universal Database for AIX 9.1 IBM DB2 Universal Database for AIX 8.0 FixPak 15 IBM DB2 Universal Database for AIX 8.0 FixPak 14 IBM DB2 Universal Database for AIX 8.0 FixPak 13
Not Vulnerable:	IBM DB2 Universal Database for Windows 9.5 Fix Pak 1 IBM DB2 Universal Database for Windows 9.1Fix Pak 4a IBM DB2 Universal Database for Windows 8.0 FixPak 16 IBM DB2 Universal Database for Solaris 9.5 FixPak 1 IBM DB2 Universal Database for Solaris 9.1 FixPak 4a IBM DB2 Universal Database for Solaris 8.0 FixPak 16 IBM DB2 Universal Database for Linux 9.5 FixPak 1 IBM DB2 Universal Database for Linux 9.1 FixPak 4a IBM DB2 Universal Database for Linux 8.0 FixPak 16 IBM DB2 Universal Database for HP-UX 9.5 FixPak 1 IBM DB2 Universal Database for HP-UX 9.1 FixPak 4a IBM DB2 Universal Database for HP-UX 8.0 FixPak 16 IBM DB2 Universal Database for AIX 9.5 FixPak 1 IBM DB2 Universal Database for AIX 9.1 FixPak 4a IBM DB2 Universal Database for AIX 8.0 FixPak 16

IBM DB2 'NNSTAT' Procedure Arbitrary File Overwrite Vulnerability

IBM DB2 is prone to a vulnerability that lets attackers overwrite arbitrary files.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Successfully exploiting this issue will compromise the application and possibly the underlying computer.

IBM DB2 'NNSTAT' Procedure Arbitrary File Overwrite Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM DB2 'NNSTAT' Procedure Arbitrary File Overwrite Vulnerability

Solution:
IBM has released an advisory and fixes. Please see the references for more information.

IBM DB2 'NNSTAT' Procedure Arbitrary File Overwrite Vulnerability

References:

• DB2 UDB Version 8 FixPaks and clients (IBM)
  
• DB2 Version 9.1 fix packs and clients (IBM)
  
• DB2 Version 9.5 fix packs and clients (IBM)
  
• IBM DB2 Homepage (IBM)
  
• Team SHATTER Security Advisory: IBM DB2 UDB Arbitrary file overwrite (Team SHATTER )