Test ID:	1.3.6.1.4.1.25623.1.0.901074
Category:	Databases
Title:	IBM DB2 Multiple Unspecified Vulnerabilities (Win)
Summary:	Check for the version of IBM DB2
Description:	Overview: The host is installed with IBM DB2 and is prone to multiple vulnerabilities. Vulnerability Insight: The flaws are due to: - An unspecified error in RAND scalar function in the common code infrastructure component when the Database Partitioning Feature (DPF) is used. - An error in common code infrastructure component does not properly validate the size of a memory pool during a creation attempt, which allows attackers to cause a denial of service via unspecified vectors. - An error in install component when configures the High Availability (HA) scripts with incorrect file-permission and authorization settings. Impact: Successful exploitation will allow attacker to bypass security restrictions, cause a denial of service and some are having unknown impact. Impact Level: System/Application Affected Software/OS: IBM DB2 version 9.5 prior to FP 5 IBM DB2 version 9.7 prior to FP 1 Fix: Update IBM DB2 9.5 FP 5 or 9.7 FP 1, http://www-01.ibm.com/support/docview.wss?rs=0&uid=swg24022678 References: http://secunia.com/advisories/37759 http://www.vupen.com/english/advisories/2009/3520 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT
Cross-Ref:	BugTraq ID: 37332 Common Vulnerability Exposure (CVE) ID: CVE-2009-4326 AIX APAR: IC63946 http://www-01.ibm.com/support/docview.wss?uid=swg1IC63946 AIX APAR: IZ44872 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44872 http://www.securityfocus.com/bid/37332 http://secunia.com/advisories/37759 http://www.vupen.com/english/advisories/2009/3520 Common Vulnerability Exposure (CVE) ID: CVE-2009-4327 AIX APAR: IC63179 http://www-01.ibm.com/support/docview.wss?uid=swg1IC63179 AIX APAR: IZ43772 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ43772 Common Vulnerability Exposure (CVE) ID: CVE-2009-4331 AIX APAR: IC63581 http://www-01.ibm.com/support/docview.wss?uid=swg1IC63581 AIX APAR: IC63959 http://www-01.ibm.com/support/docview.wss?uid=swg1IC63959
Copyright	Copyright (C) 2009 SecPod

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: