Description
Multiple buffer overflows in the DB2 JDBC Applet Server (DB2JDS) service in IBM DB2 9.x and earlier allow remote attackers to (1) execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via (2) an invalid LANG parameter or (2) a long packet that generates a "MemTree overflow."
References
- 26010 vdb-entry
- 1018029 vdb-entry
- 1018801 vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-07-056.html
- IY97750 vendor-advisory
- db2-db2jdbc-bo(34184) vdb-entry
- 40973 vdb-entry
- 40975 vdb-entry
- ADV-2007-1707 vdb-entry
- 23890 vdb-entry
- 25148 third-party-advisory
- 20071010 ZDI-07-056: IBM DB2 DB2JDS Multiple Vulnerabilities mailing-list