CVE Vulnerabilities

CVE-2006-4257

Published: Aug 21, 2006 | Modified: Oct 17, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

IBM DB2 Universal Database (UDB) before 8.1 FixPak 13 allows remote authenticated users to cause a denial of service (crash) by (1) sending the first ACCSEC command without an RDBNAM parameter during the CONNECT process, or (2) sending crafted SQLJRA packet, which results in a null dereference.

Affected Software

Name Vendor Start Version End Version
Db2 Ibm 8.1.8 8.1.8
Db2 Ibm 8.1.8 8.1.8
Db2 Ibm 8.1.8 8.1.8
Db2 Ibm 8.1.8a 8.1.8a
Db2 Ibm 8.1.7b 8.1.7b
Db2 Ibm 8.1.9a 8.1.9a
Db2 Ibm 8.1.7 8.1.7
Db2 Ibm 8.1.6 8.1.6
Db2 Ibm 8.12 8.12
Db2 Ibm 8.1.8a 8.1.8a
Db2 Ibm 8.1.4 8.1.4
Db2 Ibm 8.1.8 8.1.8
Db2 Ibm 8.1.9 8.1.9
Db2 Ibm 8.1.5 8.1.5
Db2 Ibm 8.0 8.0
Db2 Ibm 8.1.7 8.1.7
Db2 Ibm 8.0 8.0
Db2 Ibm 8.1.5 8.1.5
Db2 Ibm 8.1.6c 8.1.6c
Db2 Ibm 8.12 8.12
Db2 Ibm 8.1.8 8.1.8
Db2 Ibm 8.2 8.2
Db2 Ibm 8.12 8.12
Db2 Ibm 8.1.7b 8.1.7b
Db2 Ibm 8.1 8.1
Db2 Ibm 8.1.6c 8.1.6c
Db2 Ibm 8.1.6c 8.1.6c
Db2 Ibm 8.1.5 8.1.5
Db2 Ibm 8.1.9 8.1.9
Db2 Ibm 8.1.4 8.1.4
Db2 Ibm 8.10 8.10
Db2 Ibm 8.1.9 8.1.9
Db2 Ibm 8.1.4 8.1.4
Db2 Ibm 8.1.9a 8.1.9a
Db2 Ibm 8.1.7 8.1.7
Db2 Ibm 8.1.9a 8.1.9a
Db2 Ibm 8.1 8.1
Db2 Ibm 8.1 8.1
Db2 Ibm 8.1.8a 8.1.8a
Db2 Ibm 8.1.4 8.1.4
Db2 Ibm 8.1 8.1
Db2 Ibm 8.0 8.0
Db2 Ibm 8.1.6 8.1.6
Db2 Ibm 8.10 8.10
Db2 Ibm 8.1.5 8.1.5
Db2 Ibm 8.1.7b 8.1.7b
Db2 Ibm 8.1.7 8.1.7
Db2 Ibm 8.1.6c 8.1.6c
Db2 Ibm 8.1.9a 8.1.9a
Db2 Ibm 8.1.6 8.1.6
Db2 Ibm 8.1.9 8.1.9
Db2 Ibm 8.1.7b 8.1.7b
Db2 Ibm 8.1.8a 8.1.8a
Db2 Ibm 8.1.6 8.1.6
Db2 Ibm 8.1.8a 8.1.8a
Db2 Ibm 8.1 8.1
Db2 Ibm 8.1.6c 8.1.6c
Db2 Ibm 8.1.7 8.1.7
Db2 Ibm 8.1.9a 8.1.9a
Db2 Ibm 8.1.5 8.1.5
Db2 Ibm 8.10 8.10
Db2 Ibm 8.1.4 8.1.4
Db2 Ibm 8.1.9 8.1.9
Db2 Ibm 8.1.6 8.1.6
Db2 Ibm 8.1.7b 8.1.7b

References