SecurityTracker: IBM DB2 Data Stream Processing Flaws Let Remote Users Deny Service

	Keep Track of the Latest Vulnerabilities with SecurityTracker!

SecurityTracker Alert ID: 1021591

SecurityTracker URL: http://securitytracker.com/id/1021591

CVE Reference: CVE-2009-0172, CVE-2009-0173 (Links to External Site)

Updated: Jan 21 2009

Original Entry Date: Jan 14 2009

Impact: Denial of service via network

Fix Available: Yes Vendor Confirmed: Yes

Version(s): 9.1, 9.5

Description: Two vulnerabilities were reported in IBM DB2. A remote user can cause denial of service conditions.

A remote user can send specially crafted data to cause unspecified denial of service conditions.

IBM has assigned APARs IZ36534, IZ37697, IZ39373, and IZ39653 to these vulnerabilities.

Impact: A remote user can cause denial of service conditions.

Solution: The vendor has issued a fix (V9.1 FP6a, V9.5 FP3a).

The vendor's advisory is available at:

http://www-01.ibm.com/support/docview.wss?uid=swg21363936

Vendor URL: www-01.ibm.com/support/docview.wss?uid=swg21363936 (Links to External Site)

Cause: Not specified

Underlying OS: Linux (Any), UNIX (AIX), UNIX (HP/UX), UNIX (Solaris - SunOS), Windows (Any)

Message History: None.

Date: Wed, 14 Jan 2009 09:50:44 -0500
Subject: IBM DB2


http://www-01.ibm.com/support/docview.wss?uid=swg21363936