Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
DB:DB2:XML-QUERY-OF |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
DB |
Keywords |
IBM DB2 XML Query Overflow |
Release Date |
2008/10/08 |
Update Number |
1291 |
Supported Platforms |
idp-4.1+, isg-3.5+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
DB: IBM DB2 XML Query Overflow
This signature detects attempts to exploit a known vulnerability against IBM's DB2 database server. A successful attack can lead to arbitrary code execution.
Extended Description
IBM DB2 Universal Database is prone to multiple vulnerabilities, including buffer-overflow issues, local privilege-escalation issues, and an unspecified issue. An attacker may exploit these issues to execute arbitrary code, gain elevated privileges, or crash the affected application, denying service to legitimate users. These vulnerabilities affect versions prior to DB2 9.1 Fixpak 5.
Affected Products
- Ibm db2_universal_database_for_aix 9.1
- Ibm db2_universal_database_for_aix 9.1 FixPack 2
- Ibm db2_universal_database_for_aix 9.1 FixPak 3
- Ibm db2_universal_database_for_aix 9.1 FixPak 4
- Ibm db2_universal_database_for_aix 9.1 FixPak 4a
- Ibm db2_universal_database_for_hp-ux 9.1
- Ibm db2_universal_database_for_hp-ux 9.1 FixPack 2
- Ibm db2_universal_database_for_hp-ux 9.1 FixPak 3
- Ibm db2_universal_database_for_hp-ux 9.1 Fixpak 4
- Ibm db2_universal_database_for_hp-ux 9.1 FixPak 4a
- Ibm db2_universal_database_for_linux 9.1
- Ibm db2_universal_database_for_linux 9.1 FixPack 2
- Ibm db2_universal_database_for_linux 9.1 FixPak 3
- Ibm db2_universal_database_for_linux 9.1 FixPak 4
- Ibm db2_universal_database_for_linux 9.1 FixPak 4a
- Ibm db2_universal_database_for_solaris 9.1
- Ibm db2_universal_database_for_solaris 9.1 FixPack 2
- Ibm db2_universal_database_for_solaris 9.1 FixPak 3
- Ibm db2_universal_database_for_solaris 9.1 FixPak 4
- Ibm db2_universal_database_for_solaris 9.1 FixPak 4a
- Ibm db2_universal_database_for_windows 9.1
- Ibm db2_universal_database_for_windows 9.1 FixPack 2
- Ibm db2_universal_database_for_windows 9.1 FixPak 3
- Ibm db2_universal_database_for_windows 9.1 FixPak 4
- Ibm db2_universal_database_for_windows 9.1Fix Pak 4a
References
- BugTraq: 29601
- CVE: CVE-2008-3854