Multiple vulnerabilities have been identified in IBM DB2 for Linux, UNIX and Windows, which could be exploited by attackers or malicious users to bypass security restrictions, disclose sensitive information, cause a denial of service or execute arbitrary code.
The first issue is caused by an error in "DB2LICD" that creates an insecure directory, which could be exploited by local attackers to bypass security restrictions.
The second weakness is caused due to incorrect permissions being assigned to alternative groups specified for "DB2ADMNS" and "DB2USERS".
The third issue is caused by a divide by zero during vector aggregation, which could cause DBMS to shutdown.
The fourth vulnerability is caued by memory corruption errors during DB2 UDB authentication, which could be exploited by attackers to crash or compromise a vulnerable system.
The fifth issue is caused by errors in various setuid DB2 binaries, which could be exploited by local attackes to execute arbitrary code.
The sixth vulnerability is caused due to insecure permissions being set on the "DB2NODES.CFG" file.
The seventh issue is caused by a memory corruption error when more than 32768 file descriptors are used.
The eighth vulnerability is caused by unspecified errors in "DB2WATCH" and "DB2FREEZE".
The ninth issue is caused by an error in the "DB2DART" tool when executing the "TPUT" command, which could be exploited by malicious users to execute arbitrary code as the DB2 instance owner.
Other unspecified errors (memory corruption, memory leak, and crashes) have been reported.
Credits
Vulnerabilities reported by the vendor.
ChangeLog
2007-11-15 : Initial release
Vulnerability Management
Subscribe to FrSIRT VNS and receive real-time e-mail and SMS alerts when new vulnerabilities, exploits, or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form or by email to updates@frsirt.com.
French
