Denial of Service Condition in IBM DB2 Universal Database Server

A Denial of Service (DoS) vulnerability exists in IBM’s DB2 Universal Database server.

Ken Pfeil

July 17, 2001

1 Min Read
ITPro Today logo in a gray background | ITPro Today

Reported July 12, 2001, by GillesLami.

VERSION AFFECTED

  • IBM’s DB2 Universal Database for Windows 2000, Windows NT

 

DESCRIPTION
ADenial of Service (DoS) vulnerability exists in IBM’s DB2 Universal Databaseserver. An attacker can crash the serverby establishing a Telnet connection to the ports that the services“db2ccs.exe” and “db2jds.exe” are running on (typically ports 6790 and6789) and sending 1 byte of information.

 

VENDOR RESPONSE

Thevendor, IBM, has acknowledged thisvulnerability and will release a patch for version 7 and above.

 

CREDIT
Discovered by GillesLami.

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like