Multiple unspecified vulnerabilities in IBM DB2 Universal Database (UDB) before 8.1 FixPak 12 allow remote attackers to cause a denial of service (application crash) via a (1) long column list in the (a) REPLACE INTO and (b) INSERT INTO portions of the LOAD command or a (2) large number of values in an IN clause, possibly related to a buffer overflow.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Db2_universal_database | Ibm | * | 8.1 (including) |
| Db2_universal_database | Ibm | 8.0-fp9 (including) | 8.0-fp9 (including) |
| Db2_universal_database | Ibm | 8.1 (including) | 8.1 (including) |
References
- http://secunia.com/advisories/20579
- http://www-1.ibm.com/support/docview.wss?uid=swg1IY76767
- http://www-1.ibm.com/support/docview.wss?uid=swg1IY82725
- http://www.osvdb.org/27992
- http://www.osvdb.org/27993
- http://www.osvdb.org/29860
- http://www.vupen.com/english/advisories/2006/2332
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27099
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27101
- http://secunia.com/advisories/20579
- http://www-1.ibm.com/support/docview.wss?uid=swg1IY76767
- http://www-1.ibm.com/support/docview.wss?uid=swg1IY82725
- http://www.osvdb.org/27992
- http://www.osvdb.org/27993
- http://www.osvdb.org/29860
- http://www.vupen.com/english/advisories/2006/2332
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27099
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27101