Description
Multiple unspecified vulnerabilities in IBM DB2 Universal Database (UDB) before 8.1 FixPak 12 allow remote attackers to cause a denial of service (application crash) via a (1) "long column list" in the (a) REPLACE INTO and (b) INSERT INTO portions of the LOAD command or a (2) large number of values in an IN clause, possibly related to a buffer overflow.
References
- 27992 vdb-entry
- IY82725 vendor-advisory
- IY76767 vendor-advisory
- db2-load-command-dos(27099) vdb-entry
- 27993 vdb-entry
- db2-sql-inclause-dos(27101) vdb-entry
- 20579 third-party-advisory
- ADV-2006-2332 vdb-entry
- 29860 vdb-entry