Vulnerability Details CVE-2006-3067
Multiple unspecified vulnerabilities in IBM DB2 Universal Database (UDB) before 8.1 FixPak 12 allow remote attackers to cause a denial of service (application crash) via a (1) "long column list" in the (a) REPLACE INTO and (b) INSERT INTO portions of the LOAD command or a (2) large number of values in an IN clause, possibly related to a buffer overflow.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.016
EPSS Ranking 81.1%
CVSS Severity
CVSS v2 Score 5.0
References
- http://secunia.com/advisories/20579
- http://www-1.ibm.com/support/docview.wss?uid=swg1IY76767
- http://www-1.ibm.com/support/docview.wss?uid=swg1IY82725
- http://www.osvdb.org/27992
- http://www.osvdb.org/27993
- http://www.osvdb.org/29860
- http://www.vupen.com/english/advisories/2006/2332
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27099
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27101
- http://secunia.com/advisories/20579
- http://www-1.ibm.com/support/docview.wss?uid=swg1IY76767
- http://www-1.ibm.com/support/docview.wss?uid=swg1IY82725
- http://www.osvdb.org/27992
- http://www.osvdb.org/27993
- http://www.osvdb.org/29860
- http://www.vupen.com/english/advisories/2006/2332
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27099
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27101
Products affected by CVE-2006-3067
-
cpe:2.3:a:ibm:db2_universal_database:*
-
cpe:2.3:a:ibm:db2_universal_database:8.0
-
cpe:2.3:a:ibm:db2_universal_database:8.1