----------------------------------------------------------------------

Want to join the Secunia Security Team?

Secunia offers a position as a security specialist, where your daily
work involves reverse engineering of software and exploit code,
auditing of source code, and analysis of vulnerability reports.

http://secunia.com/secunia_security_specialist/

----------------------------------------------------------------------

TITLE:
DB2 Universal Database Multiple Denial of Service Vulnerabilities

SECUNIA ADVISORY ID:
SA20579

VERIFY ADVISORY:
http://secunia.com/advisories/20579/

CRITICAL:
Less critical

IMPACT:
DoS

WHERE:
>From local network

SOFTWARE:
DB2 Universal Database 8.x
http://secunia.com/product/857/

DESCRIPTION:
Some vulnerabilities has been reported in DB2, which can be exploited
by malicious people and users to cause a DoS (Denial of Service).

1) A boundary exists within the handling of a CONNECT or ATTACH
request. This can be exploited to cause a buffer overflow, which
crashes the database instance, via a malicious request sent to a DB2
server.

2) An error exists within the handling of the LOAD command. This can
be exploited to cause stack corruption, which crashes the database
instance, via a specially crafted LOAD command with an overly long
column list specified in the REPLACE INTO or INSERT INTO sections.

3) An error exists within the handling of incorrect package
information sent from a downlevel client. This can be exploited to
crash the server via specially crafted package information sent from
a client.

4) An error exists within the handling of a query that contains large
number of values in the IN clause and can be exploited to crash the
database instance.

Note: Several other issues that may be security related have also
been fixed.

SOLUTION:
The vulnerabilities have been fixed in Version 8 FixPak 12 (Version
8.2 FixPak 5).
http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg24012305

PROVIDED AND/OR DISCOVERED BY:
1) The vendor credits Imperva, Amichai Shulman, Ohad Atia and Elad
Tabak.
2-4) Reported by vendor.

ORIGINAL ADVISORY:
http://www-1.ibm.com/support/docview.wss?uid=swg1IY84096
http://www-1.ibm.com/support/docview.wss?uid=swg1IY76767
http://www-1.ibm.com/support/docview.wss?uid=swg1IY79204
http://www-1.ibm.com/support/docview.wss?uid=swg1IY82725

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------