PT-2005-5402 · Ibm · Ibm Db2 Universal Database

Published 2005-12-31 · Updated 2008-09-05 · CVE-2005-4737

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM DB2 Universal Database (UDB) version 8.20 before ESE AIX 5765F4100

Description The issue allows remote authenticated users to cause a denial of service by "abnormally" terminating a connection. This prevents db2agents from being properly cleared, resulting in CPU consumption.

Recommendations For IBM DB2 Universal Database (UDB) version 8.20 before ESE AIX 5765F4100, update to ESE AIX 5765F4100 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-4737

Affected Products

Ibm Db2 Universal Database

References · 4

• http://www-1.ibm.com/support/docview.wss?uid=swg1IY71587 · Vendor Advisory
• http://secunia.com/advisories/17031 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4737 · Security Note
• http://securityfocus.com/bid/15126 · Patch