DB2 FOR LUW / DB2FORLUW / 910 - DB2

There exists a buffer overflow vulnerability with the DB2 
Administrative Server (DAS). The vulnerability can cause a trap 
in DAS, causing a denial of service, or can lead to an 
escalation of privileges. 
 
This vulnerability does not affect the DB2 server. 
 
This problem was reported to IBM by an anonymous researcher 
working with TippingPoint's Zero Day Initiative 
(http://www.zerodayinitiative.com)

**************************************************************** 
* USERS AFFECTED:                                              * 
* Users of the DB2 Administrative Server.                      * 
**************************************************************** 
* PROBLEM DESCRIPTION:                                         * 
* See Error Description.                                       * 
**************************************************************** 
* RECOMMENDATION:                                              * 
* Upgrade to DB2 Version 9.1 Fix Pack 10 or do not start DAS   * 
* if DAS is not needed.                                        * 
****************************************************************

If you are not using DAS, ensure that DAS is not started.

DB2 Version 9.1 Fix Pack 11  for Linux, UNIX and Windows
 DB2 Version 9.1 Fix Pack 12  for Linux, UNIX and Windows
 

The problem was first fixed in DB2 Version 9.1 Fix Pack 10.

See Local Fix.

Vorgänger  : APAR is sysrouted TO one or more of the following: IC70538 IC70539 IC71979 
Nachfolger : 

Datum - Problem gemeldet    :
Datum - Problem geschlossen :
Datum - der letzten Änderung:

16.07.2010
27.01.2011
27.01.2011

9.1.FP10