PT-2005-5404 · Ibm · Ibm Db2 Universal Database

Published 2005-12-31 · Updated 2008-09-05 · CVE-2005-4739

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM DB2 Universal Database (UDB) versions 8.2.0 before FixPak 10 (s050811)

Description The issue allows remote authenticated users to cause a denial of service, resulting in an application crash. This is achieved by utilizing a table function for an instance of snapshot tbreorg, which triggers a trap in sqlnr EStoE action.

Recommendations For IBM DB2 Universal Database (UDB) versions 8.2.0 before FixPak 10 (s050811), update to at least FixPak 10 (s050811) to resolve the issue.

Fix

Related Identifiers

CVE-2005-4739

Affected Products

Ibm Db2 Universal Database

References · 4

• http://secunia.com/advisories/17031 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4739 · Security Note
• http://www-1.ibm.com/support/docview.wss?uid=swg1IY72588 · Vendor Advisory
• http://securityfocus.com/bid/15126 · Patch