Team,

Any body come across this problem.

SUBJECT:IBM DB2 Universal Database Multiple Remote Buffer Overflow And Unspecified Vulnerabilities

CONTENT:
The remote buffer overflow vulnerabilities exist, ultimately resulting in execution of arbitrary code. Details NGSSoftware have reported that multiple remote buffer overflow and other unspecified vulnerabilities exist in IBM DB2 Universal Database.

The reported vulnerabilities include two remote buffer overflows that are reported to be of 'critical' severity.* Details about any of the vulnerabilities are not known at this time.
Affected Technology and Version:
IBM DB2 Universal Database for AIX: 7.0.0-, 7.1.0-, 7.2.0-, 8.1.0
IBM DB2 Universal Database for HP-UX: 7.0.0-, 7.1.0-, 7.2.0-, 8.1.0
IBM DB2 Universal Database for Linux: 7.0.0-, 7.1.0-, 7.2.0-, 8.1.0
IBM DB2 Universal Database for Solaris: 7.0.0-, 7.1.0-, 7.2.0-, 8.1.0 I
BM DB2 Universal Database for Windows: 7.1.0-, 7.2.0-, 8.1.0

Thank you in advance for your REPILES.

-Raj

The remotely exploitable buffer overflows and other issues have been fixed in Fixpak 7 for DB2 8.1 and Fixpak 12 for DB2 7.x. These Fixpaks were released last week and they can be downloaded from

http://www-306.ibm.com/software/data...ownloadv8.html - DB2 v8.1
http://www-306.ibm.com/software/data...ownloadv7.html - DB2 v7.x