IBM DB2 Universal Database (UDB) before 8.1 FixPak 13 allows remote authenticated users to cause a denial of service (crash) by (1) sending the first ACCSEC command without an RDBNAM parameter during the CONNECT process, or (2) sending crafted SQLJRA packet, which results in a null dereference.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2006-08-21 13:04
Updated : 2018-10-17 14:34
NVD link : CVE-2006-4257
Mitre link : CVE-2006-4257
JSON object : View
CWE
CWE-399
Resource Management Errors
Products Affected
ibm
- db2