Intrusion PreventionIBM.DB2.Database.Server.Invalid.Data.Stream.DoS
Description
This indicates an attack attempt against a denial-of-service (DoS) vulnerability in IBM DB2 Database Server.
The vulnerability is caused by an error when the vulnerable software handles a specially crafted Distributed Relational Database Architecture (DRDA) data stream.
Affected Products
IBM DB2 Universal Database 9.5 Fixpak 2
IBM DB2 Universal Database 9.5 Fix Pack 3a
IBM DB2 Universal Database 9.5 Fix Pack 1
IBM DB2 Universal Database 9.5
IBM DB2 Universal Database 9.1 Fix Pack 6a
IBM DB2 Universal Database 9.1 Fix Pack 6
IBM DB2 Universal Database 9.1 Fix Pack 4a
IBM DB2 Universal Database 9.1
IBM DB2 Universal Database 8.2
IBM DB2 Universal Database 8.1
Impact
Denial of Service: Remote attackers can crash vulnerable systems.
Recommended Actions
Apply the patch, available from the web site:
http://www.ibm.com/support/docview.wss?rs=71&uid=swg27007053
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 17411 |
| Created | Jun 09, 2009 |
| Updated | Nov 09, 2021 |
| Risk |
|
| CVE ID | CVE-2009-0173 |
| Exploit Prediction Score | 87.73% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, Other |
| Affected App | DB2, IBM |