IBM’s widely used DB2 database software, which often stores critical data such as credit card information, has flaws that would be “trivial” for attackers to exploit. The holes, uncovered by Core Security, a network security firm, involve simple stack-based buffer overflows and are triggered by sending a long command-line argument to two vulnerable binary files — db2licm and db2dart — the default software in DB2 intended for license management and error checking.
Loading ...
DB2 Holes Offer Root Access
Posted by: Jay Lyman September 18, 2003 09:33 AMIBM’s widely used DB2 database software, which often stores critical data such as credit card information, has flaws that would be “trivial” for attackers to exploit. The holes, uncovered by Core Security, a network security firm, involve simple stack-based buffer overflows and are triggered by sending a long command-line argument to two vulnerable binary files — db2licm and db2dart — the default software in DB2 intended for license management and error checking.