Stack-Overflow Vulnerability in IBM DB2 Universal Database 7.2 for Windows

Application Security discovered that a stack-overflow vulnerability in DB2 Universal Database 7.2 for Windows can result in the execution of arbitrary code on the vulnerable server. To exploit this vulnerability, an attacker can issue a carefully crafted Invoke command. IBM has released Fixpak 10a for DB2 7.2 to fix this vulnerability.

   http://secadministrator.com/articles/index.cfm?articleid=40647

Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish