Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Windows Net Apps :: db23~1.htm

IBM Windows DB2 services can be crashed remotely



Vulnerability

    DB2

Affected

    IBM Windows DB2

Description

    Gilles  Lami  -  DSIA  found  following.   IBM  DB2  for   Windows
    (98/NT/2000) run 2 services:  db2ccs.exe (listening on port  6790)
    and db2jds.exe (port  6789).  We  may be wrong  but these services
    are  used  to  access  data  remotely  and  to remotely manage the
    database.   Both can  be crashed  remotely: just  telnet on  their
    port, send one byte and then close the connexion, that's all.

Solution

    IBM is aware of that.  They reproduced the problem and say that  a
    patch will  be availlable  in july  (so this  month) for version 7
    and above.


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH