IBM DB2 db2licm Buffer Overflow Vulnerability

Bugtraq ID:	8553
Class:	Boundary Condition Error
CVE:	CVE-2003-0759
Remote:	No
Local:	Yes
Published:	Sep 18 2003 12:00AM
Updated:	Jul 11 2009 11:56PM
Credit:	Discovery of this vulnerability has been credited to Juan Pablo Martinez Kuhn from Core Security Technologies.
Vulnerable:	IBM DB2 Universal Database for Linux 7.2
Not Vulnerable:

IBM DB2 db2licm Buffer Overflow Vulnerability

It has been reported that the IBM DB2 db2licm utility is prone to locally exploitable buffer overflow vulnerability. A local attacker, who can authenticate or has access as the db2inst1 user, may exploit this issue to execute arbitrary instructions with elevated privileges. Specifically, user 'root' privileges.

Although this vulnerability has been reported to affect IBM DB2 v7.2 for Linux x86/s390. Other IBM DB2 versions and target platforms may also be affected.

IBM DB2 db2licm Buffer Overflow Vulnerability

The following proof of concept has been supplied:

/home/db2as/sqllib/adm/db2licm `perl -e 'print "A"x999'`

Exploit code has been developed:

• /data/vulnerabilities/exploits/IBM-DB2-db2licm.c

IBM DB2 db2licm Buffer Overflow Vulnerability

Solution:
Fixpack version 10a has been released to address this issue.


IBM DB2 Universal Database for Linux 7.2

• IBM Fixpak 10a for DB2 v7.2
  http://www-3.ibm.com/cgi-bin/db2www/data/db2/udb/winos2unix/support/v7 fphist.d2w/report