Tuesday, July 11, 2017

Multiple Buffer Overflow Vulnerabilities in IBM Database software (DB2 and Informix)

Hi Dear Reader,

During the last couple of weeks we have published security vulnerabilities in database tools related to DB2 and Informix databases.
We're sure that you (as responsible database admin) usually don't run arbitrary "attacker supplied" .SQL files on your database.
But even more, after security audit results of Informix and DB2 database tools, we're sure that you want to add extra care on that one, since we've discovered that poisonous .SQL files can overflow database tools memory buffers and execute arbitrary code on your system.

Links to our advisories follows...

Informix Security Advisory:
http://www.defensecode.com/advisories/DC-2017-04-001_IBM_Informix_DB-Access_Buffer_Overflow.pdf

DB2 Security Advisory:
http://www.defensecode.com/advisories/IBM_DB2_Command_Line_Processor_Buffer_Overflow.pdf

Kind Regards,
DefenseCode Team
Posted by at

24 comments:

  2. Packers and Movers Bangalore 100% Affordable and Professional Packers and Movers in Bangalore. Compare Charges of Movers and Packers, Household Shifting Services @
    Packers And Movers Bangalore

    ReplyDelete

  3. Thanks on your marvelous posting! I really enjoyed reading it, you’re a great author.Please visit here:
    Packers And Movers Hyderabad

    ReplyDelete

  4. SQLite is a popular relational database management system excessively used in these days. But unlike other database management systems, it's not a client-server database engine.kpi dashboards

    ReplyDelete

  5. Computer software is covered by copyright and cannot be used unless it has been legally obtained. Computer software is protected under the federal copyright law which states that, "Users may not make a copy of a piece of software for any other reason than as an archival back-up without permission of the copyright holder. Getintopc

    ReplyDelete

  6. This type of testing is a type of black-box testing based on the specifications of the software components being tested. salesforce datawarehouse reporting

    ReplyDelete

  7. This blog is so nice to me. I will continue to come here again and again. Visit my link as well. Good luck
    obat aborsi
    cara menggugurkan kandungan
    cara menggugurkan kandungan

    ReplyDelete

  8. By shuffling through these cards, it is possible to identify who went on which tour, produce an alphabetized list, or, rearrange the cards in zip code order for a bulk mailing. oracle dashboards

    ReplyDelete

  10. This comment has been removed by the author.

    ReplyDelete

  12. There are things I can not understand but I will learn it. I think nothing is too late. Then I realized that I had improved a lot.
    run3play.com

    ReplyDelete

  14. Microsoft has received much acclaim which is in stark comparison to their last OS Alcodasoftware
    (operating system) release, that being Windows Vista. Another OS being sold is Or windows 7.

    ReplyDelete

  15. SQLite is a popular relational database management system excessively used in these days.
    filehippo

    ReplyDelete

  17. It was nice articles . Very informative and expressive .things are easily explained by admin,i was downloaded some days before but I got error while installing , I thing somewhere i made mistake. Now , I find my Fault after this very good readable blog . so I am very Thankful to The Admin and Please Buddy Share your Knowledge Time to Time .
    filehippo
    file hippo
    File hippo
    Download Free PC Software
    File hippo

    ReplyDelete

  18. Yes the article you have posted is of good quality . I must appreciate this .We also have some gaming blogs as well
    happy wheels game||fireboywatergirl.co||
    happy wheels||happywheels.in||

    ReplyDelete

  19. This post is really informative and you have posted such precious and informative article which gave me lot of information. I hope that you will keep it up and we will have more informative and helping news from you.
    Click to play more great friv games at friv30game.com

    ReplyDelete

  20. Thanks for Sharing a Great Post.
    Kvch Delhi is an growing institute for Summer training in PHP in Delhi to build their career in web technology and IT industry. We are among the few PHP training institutes in Delhi having roots in software and web technology development. We are division of our well-known web development and promotion venture Wings IT Solutions. We are providing 6 Weeks Summer Internship in PHP in Delhi with Live Project.
    Best 6 Weeks training in PHP in Delhi
    6 Weeks Summer Internship in PHP in Delhi

    ReplyDelete

Subscribe to: Post Comments (Atom)