Description
Multiple buffer overflows in the JAR file administration routines in the BSU JAVA subcomponent in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 allow remote authenticated users to cause a denial of service (instance crash) via a call to the (1) RECOVERJAR or (2) REMOVE_JAR procedure with a crafted parameter, related to (a) sqlj.install_jar and (b) sqlj.replace_jar.
References
- IZ15496 vendor-advisory
- 28835 vdb-entry
- http://www-1.ibm.com/support/docview.wss?uid=swg21255607
- http://www.appsecinc.com/resources/alerts/db2/2008-04.shtml
- IZ08512 vendor-advisory
- 46269 vdb-entry
- 29601 vdb-entry
- ibm-db2-recoverjar-removejar-dos(41955) vdb-entry
- IZ08945 vendor-advisory
- 46268 vdb-entry
- 29022 third-party-advisory
- 20080418 Team SHATTER Security Advisory: Multiple DoS in JAR files manipulation procedures mailing-list