CVE-2007-5652

IBM DB2 < 9.1 - Denial of Service via Authentication Information List Storage

Title source: llm
STIX 2.1

Description

IBM DB2 UDB 9.1 before Fixpak 4 does not properly manage storage of a list containing authentication information, which might allow attackers to cause a denial of service (instance crash) or trigger memory corruption. NOTE: the vendor description of this issue is too vague to be certain that it is security-related.

References (7)

Core 7
Core References
Various Sources x_refsource_confirm
http://www-1.ibm.com/support/docview.wss?uid=swg21255607
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3538
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3867
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/26450
Various Sources vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=swg1LI72519
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27177

Scores

EPSS 0.0179
EPSS Percentile 75.9%

Details

CWE
CWE-119
Status published
Products (2)
ibm/db2 9.1 fp1 (4 CPE variants)
ibm/db2 < 9.1
Published Oct 23, 2007
Tracked Since Feb 18, 2026