----------------------------------------------------------------------

Want a new job?

http://secunia.com/secunia_security_specialist/
http://secunia.com/hardcore_disassembler_and_reverse_engineer/

International Partner Manager - Project Sales in the IT-Security
Industry:
http://corporate.secunia.com/about_secunia/64/

----------------------------------------------------------------------

TITLE:
DB2 Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA30558

VERIFY ADVISORY:
http://secunia.com/advisories/30558/

CRITICAL:
Moderately critical

IMPACT:
Unknown, Privilege escalation

WHERE:
>From remote

SOFTWARE:
IBM DB2 9.x
http://secunia.com/product/13504/

DESCRIPTION:
Some vulnerabilities have been reported in IBM DB2, where some have
unknown impact and others can be exploited by malicious, local users
to gain escalated privileges.

1) An unspecified vulnerability exists in CLR stored procedure
deployment from IBM database add-ins for Visual Studio.

2) A boundary error in "SQLRLAKA()" can potentially be exploited to
cause a stack-based buffer overflow.

3) An unspecified error related to file creation in the admin server
can be exploited by malicious, local users to gain root privileges.

4) Boundary errors in XQUERY, XMLQUERY, XMLEXISTS, and XMLTABLE can
potentially be exploited to cause buffer overflows.

The vulnerabilities are reported in version 9.1.

SOLUTION:
IBM DB2 9.1:
Apply Fix Pack 5.
http://www-1.ibm.com/support/docview.wss?uid=swg21255572

PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.

ORIGINAL ADVISORY:
IBM (JR28432, IZ16346, IZ12735, IZ18434)
http://www-1.ibm.com/support/docview.wss?uid=swg21255607

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------