Signature Detail

DB: IBM DB2 XML Query Overflow

This signature detects attempts to exploit a known vulnerability against IBM's DB2 database server. A successful attack can lead to arbitrary code execution.

Extended Description

IBM DB2 Universal Database is prone to multiple vulnerabilities, including buffer-overflow issues, local privilege-escalation issues, and an unspecified issue. An attacker may exploit these issues to execute arbitrary code, gain elevated privileges, or crash the affected application, denying service to legitimate users. These vulnerabilities affect versions prior to DB2 9.1 Fixpak 5.

Affected Products

• IBM DB2 Universal Database for AIX 9.1
• IBM DB2 Universal Database for AIX 9.1 FixPack 2
• IBM DB2 Universal Database for AIX 9.1 FixPak 3
• IBM DB2 Universal Database for AIX 9.1 FixPak 4
• IBM DB2 Universal Database for AIX 9.1 FixPak 4a
• IBM DB2 Universal Database for HP-UX 9.1
• IBM DB2 Universal Database for HP-UX 9.1 FixPack 2
• IBM DB2 Universal Database for HP-UX 9.1 FixPak 3
• IBM DB2 Universal Database for HP-UX 9.1 Fixpak 4
• IBM DB2 Universal Database for HP-UX 9.1 FixPak 4a
• IBM DB2 Universal Database for Linux 9.1
• IBM DB2 Universal Database for Linux 9.1 FixPack 2
• IBM DB2 Universal Database for Linux 9.1 FixPak 3
• IBM DB2 Universal Database for Linux 9.1 FixPak 4
• IBM DB2 Universal Database for Linux 9.1 FixPak 4a
• IBM DB2 Universal Database for Solaris 9.1
• IBM DB2 Universal Database for Solaris 9.1 FixPack 2
• IBM DB2 Universal Database for Solaris 9.1 FixPak 3
• IBM DB2 Universal Database for Solaris 9.1 FixPak 4
• IBM DB2 Universal Database for Solaris 9.1 FixPak 4a
• IBM DB2 Universal Database for Windows 9.1
• IBM DB2 Universal Database for Windows 9.1 FixPack 2
• IBM DB2 Universal Database for Windows 9.1 FixPak 3
• IBM DB2 Universal Database for Windows 9.1 FixPak 4
• IBM DB2 Universal Database for Windows 9.1Fix Pak 4a

References

• BugTraq: 29601
• CVE: CVE-2008-3854