IBM DB2 DAS Server Buffer Overflow Vulnerability

Bugtraq ID:	35408
Class:	Boundary Condition Error
CVE:	CVE-2008-6821
Remote:	Yes
Local:	No
Published:	Sep 08 2008 12:00AM
Updated:	Jun 17 2009 04:39PM
Credit:	Diego Bauche of Application Security Inc.
Vulnerable:	IBM DB2 Universal Database for Windows 8.0 IBM DB2 Universal Database for Windows 9.5 Fix Pak 1 IBM DB2 Universal Database for Windows 9.5 IBM DB2 Universal Database for Windows 9.1Fix Pak 4a IBM DB2 Universal Database for Windows 9.1 FixPak 4 IBM DB2 Universal Database for Windows 9.1 FixPak 3 IBM DB2 Universal Database for Windows 9.1 FixPack 2 IBM DB2 Universal Database for Windows 9.1 IBM DB2 Universal Database for Windows 9.1 IBM DB2 Universal Database for Windows 8.0 FixPak 16 IBM DB2 Universal Database for Windows 8.0 FixPak 13 IBM DB2 Universal Database for Solaris 8.0 IBM DB2 Universal Database for Solaris 9.5 FixPak 1 IBM DB2 Universal Database for Solaris 9.5 IBM DB2 Universal Database for Solaris 9.1 FixPak 4a IBM DB2 Universal Database for Solaris 9.1 Fixpak 4 IBM DB2 Universal Database for Solaris 9.1 FixPak 4 IBM DB2 Universal Database for Solaris 9.1 FixPak 3 IBM DB2 Universal Database for Solaris 9.1 FixPack 2 IBM DB2 Universal Database for Solaris 9.1 IBM DB2 Universal Database for Solaris 8.0 FixPak 16 IBM DB2 Universal Database for Solaris 8.0 FixPak 13 IBM DB2 Universal Database for OS/390 and z/OS 8.0 IBM DB2 Universal Database for Linux 8.0 IBM DB2 Universal Database for Linux 9.5 FixPak 1 IBM DB2 Universal Database for Linux 9.5 IBM DB2 Universal Database for Linux 9.1 FixPak 4a IBM DB2 Universal Database for Linux 9.1 Fixpak 4 IBM DB2 Universal Database for Linux 9.1 FixPak 4 IBM DB2 Universal Database for Linux 9.1 FixPak 3 IBM DB2 Universal Database for Linux 9.1 FixPack 2 IBM DB2 Universal Database for Linux 9.1 IBM DB2 Universal Database for Linux 8.0 FixPak 16 IBM DB2 Universal Database for Linux 8.0 FixPak 13 IBM DB2 Universal Database for IX 9.1 Fixpak 4 IBM DB2 Universal Database for HP-UX 8.0 IBM DB2 Universal Database for HP-UX 9.5 FixPak 1 IBM DB2 Universal Database for HP-UX 9.5 IBM DB2 Universal Database for HP-UX 9.1 FixPak 4a IBM DB2 Universal Database for HP-UX 9.1 Fixpak 4 IBM DB2 Universal Database for HP-UX 9.1 FixPak 3 IBM DB2 Universal Database for HP-UX 9.1 FixPack 2 IBM DB2 Universal Database for HP-UX 9.1 IBM DB2 Universal Database for HP-UX 9.1 IBM DB2 Universal Database for HP-UX 8.0 FixPak 16 IBM DB2 Universal Database for HP-UX 8.0 FixPak 13 IBM DB2 Universal Database for AIX 8.0 IBM DB2 Universal Database for AIX 9.5 FixPak 1 IBM DB2 Universal Database for AIX 9.5 IBM DB2 Universal Database for AIX 9.1 FixPak 4a IBM DB2 Universal Database for AIX 9.1 FixPak 4 IBM DB2 Universal Database for AIX 9.1 FixPak 3 IBM DB2 Universal Database for AIX 9.1 FixPack 2 IBM DB2 Universal Database for AIX 9.1 IBM DB2 Universal Database for AIX 9.1 IBM DB2 Universal Database for AIX 8.0 FixPak 16 IBM DB2 Universal Database for AIX 8.0 FixPak 15 IBM DB2 Universal Database for AIX 8.0 FixPak 14 IBM DB2 Universal Database for AIX 8.0 FixPak 13 IBM DB2 Universal Database 9.5 Fix Pack 1 IBM DB2 Universal Database 9.5 IBM DB2 Universal Database 9.1 Fix Pack 4a IBM DB2 Universal Database 9.1 IBM DB2 Universal Database 8.0.0 FixPak 16 IBM DB2 Universal Database 8.0
Not Vulnerable:	IBM DB2 Universal Database for Windows 9.5 Fixpak 2 IBM DB2 Universal Database for Windows 9.1 Fixpak 5 IBM DB2 Universal Database for Solaris 9.5 Fixpak 2 IBM DB2 Universal Database for Solaris 9.1 Fixpak 5 IBM DB2 Universal Database for Linux 9.5 Fixpak 2 IBM DB2 Universal Database for Linux 9.1 Fixpak 5 IBM DB2 Universal Database for HP-UX 9.5 Fixpak 2 IBM DB2 Universal Database for HP-UX 9.1 Fixpak 5 IBM DB2 Universal Database for AIX 9.5 Fixpak 2 IBM DB2 Universal Database for AIX 9.1 Fixpak 5 IBM DB2 Universal Database 9.5 Fixpak 2 IBM DB2 Universal Database 9.1 FP5 IBM DB2 Universal Database 8.0.0 FixPak 17

IBM DB2 DAS Server Buffer Overflow Vulnerability

IBM DB2 is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

Attackers can exploit this issue to execute arbitrary code within the context of the affected service. Successfully exploiting this issue may facilitate in the remote compromise of affected computers. Failed exploit attempts will likely crash the affected application.

Versions *prior to* the following are vulnerable:

DB2 8 FP17
DB2 9.1 FP5
DB2 9.5 FP2

IBM DB2 DAS Server Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM DB2 DAS Server Buffer Overflow Vulnerability

Solution:
IBM has released fixes to address this issue. Please see the references for details.

IBM DB2 DAS Server Buffer Overflow Vulnerability

References:

• IZ22190: Buffer overflow condition in DAS server code. (IBM)
  
• Security Vulnerabilities and HIPER APARs fixed in DB2 for Linux, UNIX, and Wi (IBM)
  
• IBM DB2 Homepage (IBM)
  
• IZ22004: Buffer overflow condition in DAS server code. (IBM)
  
• IZ22188: Buffer overflow condition in DAS server code. (IBM)