DB2 - Problembeschreibung
Problem IC82367 | Status: Geschlossen |
SECURITY: DB2 DENIAL OF SERVICE VULNERABILITY IN THE DRDA COMPONENT (CVE-2012-2180). | |
Produkt: | |
DB2 FOR LUW / DB2FORLUW / 980 - DB2 | |
Problembeschreibung: | |
A vulnerability in DB2 could allow an unauthenticated, remote attacker to sent a specially crafted Distributed Relational Database Architecture (DRDA) request to a database server to cause it to trap. | |
Problem-Zusammenfassung: | |
**************************************************************** * USERS AFFECTED: * * All DB2 systems on all Linux, Unix and Windows platforms at * * service levels Version 9.8 GA through to Version 9.8 Fix * * Pack 4. * **************************************************************** * PROBLEM DESCRIPTION: * * See Error Description * **************************************************************** * RECOMMENDATION: * * Upgrade to DB2 Version 9.8 Fix Pack 5. * **************************************************************** | |
Local-Fix: | |
Lösung | |
The complete fix for this problem first appears in DB2 Version 9.8 Fix Pack 5 and all the subsequent Fix Packs. | |
Workaround | |
keiner bekannt / siehe Local-Fix | |
Weitere Daten | |
Datum - Problem gemeldet : Datum - Problem geschlossen : Datum - der letzten Änderung: | 29.03.2012 06.12.2013 06.12.2013 |
Problem behoben ab folgender Versionen (IBM BugInfos) | |
9.8.FP5 | |
Problem behoben lt. FixList in der Version |