APAR status
Closed as program error.
Error description
A malicious, malformed data stream sent to a DB2 server can cause the server to trap. However, the malformed data stream is only effective after a valid DB2 authentication has occurred. A regular DB2 client can not flow the malformed data stream under regular use or accidental use. . This problem was reported to IBM by Dennis Yurichev.
Local fix
Problem summary
**************************************************************** USERS AFFECTED: All DB2 servers on all Linux, Unix and Windows platforms at service levels from Version 8.1 GA through to Version 8.1 Fix Pack 17. **************************************************************** PROBLEM DESCRIPTION: A malicious, malformed data stream sent to a DB2 server can cause the server to trap. However, the malformed data stream is only effective after a valid DB2 authentication has occurred. A regular DB2 client can not flow the malformed data stream under regular use or accidental use. . This problem was reported to IBM by Dennis Yurichev. **************************************************************** RECOMMENDATION: Upgrade to DB2 Version 8.1 Fix Pack 17a. ****************************************************************
Problem conclusion
The complete fix for this problem first appears in DB2 Version 8.1 Fix Pack 17a and all the subsequent Fix Packs.
Temporary fix
Comments
APAR Information
APAR number
IZ39652
Reported component name
DB2 UDB ESE AIX
Reported component ID
5765F4100
Reported release
820
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2008-12-09
Closed date
2009-02-13
Last modified date
2009-02-13
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
DB2 UDB ESE AIX
Fixed component ID
5765F4100
Applicable component levels
R820 PSN
UP
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSEPGG","label":"Db2 for Linux, UNIX and Windows"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"820","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]
Document Information
Modified date:
13 February 2009