[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250108

 
 

909

 
 

196064

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Denial of service vulnerability in the "Query Compiler, Rewrite, Optimizer" component in IBM DB2 UDB 9.5 before FP6a

ID: oval:org.secpod.oval:def:648Date: (C)2011-04-08   (M)2022-10-10
Class: VULNERABILITYFamily: windows




he host is installed with IBM DB2 UDB 9.5 before FP6a and is prone to denial of service vulnerability. A flaw is present in "Query Compiler, Rewrite, Optimizer" component in IBM DB2 which fails to authenticate a crafted query involving certain UNION ALL. Successful exploitation allow remote authenticated users to cause a denial of service (CPU consumption).

Platform:
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Vista
Microsoft Windows XP
Product:
IBM DB2
Reference:
CVE-2010-3735
CVE    1
CVE-2010-3735
CPE    2
cpe:/a:ibm:db2
cpe:/a:ibm:db2:9.5

© SecPod Technologies