Vulnerability in IBM Db2 Universal Database

CVE-2006-3066

Buffer overflow in the TCP/IP listener in IBM DB2 Universal Database (UDB) before 8.1 FixPak 12 allows remote attackers to cause a denial of service (application crash) via a long MGRLVLLS message inside of an EXCSAT message when establishing a connection.

EPSS: 0.020 (78.4th percentile) — read the EPSS interpretation.

Affected products

Ibm Db2_universal_database — versions 8.0, 8.1, 8.1.4
N/a — versions n/a

References

cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (vendor-advisory, Patch, x_refsource_AIXAPAR)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_VUPEN)