IBM DB2 Prior to 8.1 Fixpack 18 Multiple Security Vulnerabilities

Bugtraq ID:	36059
Class:	Unknown
CVE:	CVE-2009-2858 CVE-2009-2859 CVE-2009-2860 CVE-2009-2971
Remote:	Yes
Local:	Yes
Published:	Aug 18 2009 12:00AM
Updated:	Oct 16 2009 07:19PM
Credit:	Liu Yexin of NSFOCUS Security Team and IBM
Vulnerable:	IBM DB2 Universal Database 8.2 FixPak 8 IBM DB2 Universal Database 8.2 IBM DB2 Universal Database 8.1 FixPak 17a IBM DB2 Universal Database 8.1 FixPak 15 IBM DB2 Universal Database 8.1 IBM DB2 Universal Database 8.0.0 FixPak 17 IBM DB2 Universal Database 8.0.0 FixPak 16 IBM DB2 Universal Database 8.0
Not Vulnerable:	IBM DB2 Universal Database 8.1 FixPak 18

IBM DB2 Prior to 8.1 Fixpack 18 Multiple Security Vulnerabilities

IBM DB2 is prone to multiple remote vulnerabilities.

An attacker can exploit these issues to bypass certain security restrictions or cause denial-of-service conditions.

These issues affect versions prior to IBM DB2 8 FixPak 18.

IBM DB2 Prior to 8.1 Fixpack 18 Multiple Security Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM DB2 Prior to 8.1 Fixpack 18 Multiple Security Vulnerabilities

Solution:
The vendor has released fixes. Please see the references for more information.

IBM DB2 Prior to 8.1 Fixpack 18 Multiple Security Vulnerabilities

References:

• IBM DB2 Homepage (IBM)
  
• IZ52433: SECURITY: MALICIOUS PACKETS CAUSE DB2JDS TO CRASH. (IBM)
  
• NSFOCUS - IBM DB2 JDBC Applet Server Remote DoS Vulnerability(SA2009-02) (NSFOCUS)
  
• NSFOCUS SA2009-02 : IBM DB2 JDBC Applet Server Remote DoS Vulnerability (NSFOCUS Security Team )
  
• DB2 UDB Version 8.1 FixPak 18 (also known as Version 8.2 FixPak 11) (IBM)