JR29274: SECURITY: MALICIOUS PACKETS SENT TO DB2JDS CAUSES CRASH.

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • Malicious packets sent to db2jds will cause db2jds to crash.
    db2jds is the IBM DB2 JDBC Applet Server Service.
    This problem was reported to IBM by Ariel Sanchez of
    ApplicationSecurity Inc.
    

Local fix

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    ALL
    ****************************************************************
    PROBLEM DESCRIPTION:
    Malicious packets sent to db2jds will cause db2jds to crash.
    db2jds is the IBM DB2 JDBC Applet Server Service.
    ****************************************************************
    RECOMMENDATION:
    Upgrade to V8.2 FP17.
    ****************************************************************
    

Problem conclusion

  • First fixed in DB2 UDB Version v8.2, FixPak 17
    

Temporary fix

Comments

APAR Information

  • APAR number

    JR29274

  • Reported component name

    DB2 CEE WINDOWS

  • Reported component ID

    5765F3001

  • Reported release

    820

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2008-05-13

  • Closed date

    2008-09-04

  • Last modified date

    2008-09-04

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    JR29935 JR29936

Fix information

  • Fixed component name

    DB2 CEE WINDOWS

  • Fixed component ID

    5765F3001

Applicable component levels

  • R910 PSY

       UP

  • R950 PSY

       UP



Rate this page:

(0 users)Average rating

Add comments

Document information


More support for:

DB2 for Linux, UNIX and Windows

Software version:

820

Reference #:

JR29274

Modified date:

2008-09-04

Translate my page

Machine Translation

Content navigation