Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
DB:DB2:CONNECT-DOS |
|---|---|
Severity |
Minor |
Recommended |
No |
Recommended Action |
Drop |
Category |
DB |
Keywords |
IBM DB2 Database Server CONNECT Request DOS |
Release Date |
2010/09/17 |
Update Number |
1775 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
DB: IBM DB2 Database Server CONNECT Request DOS
This signature detects attempts to exploit a known vulnerability against IBM DB2 Database. A successful attack can result in a denial-of-service condition.
Extended Description
Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote attackers to cause a denial of service (infinite loop) via a crafted CONNECT data stream.
Affected Products
- Ibm db2_universal_database 9.1
- Ibm db2_universal_database 9.5
References
- BugTraq: 33258
- CVE: CVE-2009-0172