BID:31856

IBM DB2 Universal Database Prior to 9.1 Fixpak 6 Multiple Vulnerabilities

Info

IBM DB2 Universal Database Prior to 9.1 Fixpak 6 Multiple Vulnerabilities

Bugtraq ID:	31856
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Oct 21 2008 12:00AM
Updated:	Oct 22 2008 02:26PM
Credit:	IBM
Vulnerable:	IBM DB2 Universal Database for Windows 9.1Fix Pak 4a IBM DB2 Universal Database for Windows 9.1 Fixpak 5 IBM DB2 Universal Database for Windows 9.1 FixPak 4 IBM DB2 Universal Database for Windows 9.1 FixPak 3 IBM DB2 Universal Database for Windows 9.1 FixPack 2 IBM DB2 Universal Database for Windows 9.1 IBM DB2 Universal Database for Solaris 9.1 Fixpak 5 IBM DB2 Universal Database for Solaris 9.1 FixPak 4a IBM DB2 Universal Database for Solaris 9.1 Fixpak 4 IBM DB2 Universal Database for Solaris 9.1 FixPak 3 IBM DB2 Universal Database for Solaris 9.1 FixPack 2 IBM DB2 Universal Database for Solaris 9.1 IBM DB2 Universal Database for Linux 9.1 Fixpak 5 IBM DB2 Universal Database for Linux 9.1 FixPak 4a IBM DB2 Universal Database for Linux 9.1 Fixpak 4 IBM DB2 Universal Database for Linux 9.1 FixPak 4 IBM DB2 Universal Database for Linux 9.1 FixPak 3 IBM DB2 Universal Database for Linux 9.1 FixPack 2 IBM DB2 Universal Database for Linux 9.1 IBM DB2 Universal Database for HP-UX 9.1 Fixpak 5 IBM DB2 Universal Database for HP-UX 9.1 FixPak 4a IBM DB2 Universal Database for HP-UX 9.1 Fixpak 4 IBM DB2 Universal Database for HP-UX 9.1 FixPak 3 IBM DB2 Universal Database for HP-UX 9.1 FixPack 2 IBM DB2 Universal Database for HP-UX 9.1 IBM DB2 Universal Database for AIX 9.1 FixPak 4a IBM DB2 Universal Database for AIX 9.1 FixPak 4 IBM DB2 Universal Database for AIX 9.1 FixPak 3 IBM DB2 Universal Database for AIX 9.1 FixPack 2 IBM DB2 Universal Database for AIX 9.1

Not Vulnerable:	IBM DB2 Universal Database 9.1 Fix Pack 6

Discussion

IBM DB2 Universal Database Prior to 9.1 Fixpak 6 Multiple Vulnerabilities

IBM DB2 Universal Database is prone to multiple vulnerabilities.

Successful exploits may allow attackers to obtain sensitive information or cause a denial-of-service condition.

Versions prior to DB2 9.1 Fixpak 6 are affected.

Exploit / POC

IBM DB2 Universal Database Prior to 9.1 Fixpak 6 Multiple Vulnerabilities

Currently we are not aware of any working exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Solution / Fix

IBM DB2 Universal Database Prior to 9.1 Fixpak 6 Multiple Vulnerabilities

Solution:
The vendor has released an advisory and fixes. Please see the references for more information.

References

IBM DB2 Universal Database Prior to 9.1 Fixpak 6 Multiple Vulnerabilities

References: