CVE-2007-2582 Multiple buffer overflows in the DB2 JDBC Applet Server (DB2JDS) service in IBM DB2 9.x and earlier allow remote attackers to (1) execute arbitrary code via a crafted packet to the DB2JDS service on t...
HighCVSS 10.0
EPSS 27.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in the DB2 JDBC Applet Server (DB2JDS) service in IBM DB2 9.x and earlier allow remote attackers to (1) execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via (2) an invalid LANG parameter or (2) a long packet that generates a "MemTree overflow."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm db2 | <= 9.0 | No fix listed |
References
- 40973 vdb-entry
- 40975 vdb-entry
- 25148 patch third-party-advisory vendor-advisory
- IY97750 vendor-advisory
- 20071010 ZDI-07-056: IBM DB2 DB2JDS Multiple Vulnerabilities mailing-list
- 23890 vdb-entry
- 26010 vdb-entry
- 1018029 vdb-entry
- 1018801 vdb-entry
- ADV-2007-1707 vdb-entry vendor-advisory
- www.zerodayinitiative.com
- db2-db2jdbc-bo(34184) vdb-entry