Technical Description

Multiple vulnerabilities have been identified in IBM DB2 for Linux, UNIX and Windows, which could be exploited by attackers or malicious users to bypass security restrictions, disclose sensitive information, cause a denial of service or execute arbitrary code.

The first issue is caused by an error in "DB2LICD" that creates an insecure directory, which could be exploited by local attackers to bypass security restrictions.

The second weakness is caused due to incorrect permissions being assigned to alternative groups specified for "DB2ADMNS" and "DB2USERS".

The third issue is caused by a divide by zero during vector aggregation, which could cause DBMS to shutdown.

The fourth vulnerability is caued by memory corruption errors during DB2 UDB authentication, which could be exploited by attackers to crash or compromise a vulnerable system.

The fifth issue is caused by errors in various setuid DB2 binaries, which could be exploited by local attackes to execute arbitrary code.

The sixth vulnerability is caused due to insecure permissions being set on the "DB2NODES.CFG" file.

The seventh issue is caused by a memory corruption error when more than 32768 file descriptors are used.

The eighth vulnerability is caused by unspecified errors in "DB2WATCH" and "DB2FREEZE".

The ninth issue is caused by an error in the "DB2DART" tool when executing the "TPUT" command, which could be exploited by malicious users to execute arbitrary code as the DB2 instance owner.

Other unspecified errors (memory corruption, memory leak, and crashes) have been reported.

Affected Products

IBM DB2 for Linux, UNIX and Windows version 9.1 Fixpak 3 and prior

Solution

Apply Fixpak 4 :
http://www-1.ibm.com/support/docview.wss?rs=71&uid=swg21255572

References

http://www.vupen.com/english/advisories/2007/3867
http://www-1.ibm.com/support/docview.wss?uid=swg21255607

Credits

Vulnerabilities reported by the vendor.

ChangeLog

2007-11-15 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.