• [October 28, 2003]
  • Stack Overflow Vulnerability in IBM DB2 Universal Data Base v7.2 for Windows
  • By:  Ken Pfeil
  • Discoveries
  • InstantDoc #40647
  • Web Exclusive from Windows IT Pro

Reported October 24, 2003 by Application Security, Inc.

 

 

VERSIONS AFFECTED

 

IBM DB2 Universal Database 7.2 for Windows

 

DESCRIPTION

 

A stack-overflow vulnerability in DB2 Universal Database 7.2 for Windows can result in the execution of arbitrary code on the vulnerable server. To exploit this vulnerability, an attacker can issue a carefully crafted Invoke command.

 

VENDOR RESPONSE

 

IBM has released Fixpak 10a for DB2 v7.2 to fix this vulnerability.

 

CREDIT

 

Discovered by Application Security, Inc.

End of Article


You must log on before posting a comment.

If you don't have a username & password, please register now.