KLA10133 ACE vulnerabilities in IBM DB2

Multiple buffer overflows was found in the IBM DB2. By using this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally via a specially designed libname, environment variable or parameter.

Original advisories

Related products

DB2-Universal-Database

CVE list

CVE-2005-4863 high

CVE-2005-4864 high

CVE-2005-4865 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• IBM DB2 Universal Database 7 all versionsIBM DB2 Universal Database 8 version 8.1