The Downlevel DB2RA Support component in IBM DB2 9.1 before Fixpak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT data stream that simulates a V7 client connect request.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Db2_universal_database | Ibm | 9.1 (including) | 9.1 (including) |
| Db2_universal_database | Ibm | 9.1-fp2 (including) | 9.1-fp2 (including) |
| Db2_universal_database | Ibm | 9.1-fp3 (including) | 9.1-fp3 (including) |
| Db2_universal_database | Ibm | 9.1-fp4 (including) | 9.1-fp4 (including) |
| Db2_universal_database | Ibm | 9.1-fp4a (including) | 9.1-fp4a (including) |
References
- http://osvdb.org/48428
- http://www-1.ibm.com/support/docview.wss?uid=swg1IZ07299
- http://www-1.ibm.com/support/docview.wss?uid=swg21255607
- http://www.securityfocus.com/bid/29601
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45138
- http://osvdb.org/48428
- http://www-1.ibm.com/support/docview.wss?uid=swg1IZ07299
- http://www-1.ibm.com/support/docview.wss?uid=swg21255607
- http://www.securityfocus.com/bid/29601
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45138