Buffer overflow in the DAS server in IBM DB2 UDB before 8.2 Fixpak 16 has unknown attack vectors, and an impact probably involving "invalid memory access."

According to its version, the installation of DB2 on the remote host is affected by one or more of the following issues :

 - A local user may be able to gain root privileges using the 'db2pd' tool (IZ03546).
 - The 'b2dart' tool executes a TPUT command that effectively allows users to run commands as the DB2 instance owner (IZ03647).
 - A buffer overflow and invalid memory access vulnerability exists in the DAS server code (IZ05496).
 - An unspecified vulnerability in 'SYSPROC.ADMIN_SP_C' (IZ06972).
 - An unspecified vulnerability exists due to incorrect authorization checking in 'ALTER TABLE' statements (IZ07337).

According to its version, the installation of IBM DB2 running on the remote host is affected by one or more of the following issues :

  - A local user may be able to gain root privileges using     the 'db2pd' tool. (IZ03546)

  - The 'b2dart' tool executes a TPUT command, which     effectively allows users to run commands as the DB2     instance owner. (IZ03647)

  - A buffer overflow and invalid memory access     vulnerability exist in the DAS server code. (IZ05496)

  - An unspecified vulnerability in 'SYSPROC.ADMIN_SP_C'.
    (IZ06972)

  - An unspecified vulnerability exists due to incorrect     authorization checking in 'ALTER TABLE' statements.
    (IZ07337)

According to its version, the installation of IBM DB2 running on the remote host is affected by one or more of the following issues :

  - The 'db2dart' tool executes the 'tput' command which     effectively allows a malicious user to run commands     as the DB2 instance owner (IZ03646).

  - 'db2watch' and 'db2freeze' have some unspecified     vulnerability (IZ03655).

  - Incorrect permissions on ACLs for 'DB2NODES.CFG'     (JR26989).

  - A local user may be able to gain root privileges using     an unspecified vulnerability in several set-uid     binaries (IZ07018).

  - A buffer overflow and invalid memory access     vulnerability exists in the DAS server code (unknown).

ID	Name	Product	Family	Severity
4358	DB2 < 8.1 FixPak 16 Multiple Vulnerabilities (deprecated)	Nessus Network Monitor	Database	high
30153	IBM DB2 < 8.1 Fix Pack 16 Multiple Vulnerabilities	Nessus	Databases	critical
28227	IBM DB2 < 9 Fix Pack 4 Multiple Vulnerabilities	Nessus	Databases	critical

Detections

Analytics

CVE-2008-0698

critical

Tenable Plugins

high

critical

critical