A remote overflow exists in DB2. The JDBC Applet Server fails to perform proper bounds checking resulting in a buffer overflow. By sending an overly long username containing 2,200 bytes or more, a remote attacker can bypass authentication settings resulting in a loss of integrity.

Currently, there are no known workarounds or upgrades to correct this issue. However, IBM has released a patch to address this vulnerability.

• Keyword: #NISR05012005D APAR IY61492
• Security Tracker: 1011562
• Related OSVDB ID: 10513 10514 10516 10517 10518 10519 10520 10521 10522 10523 12754 12755 12756 12757
• Bugtraq ID: 11401
• Secunia Advisory ID: 12733
• ISS X-Force ID: 17613
• CVE ID: 2005-4866 (see also: NVD)
• Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-01/0026.html
• Vendor Specific Advisory URL: http://www-1.ibm.com/support/docview.wss?rs=71&context=SSEPGG&uid=swg21179535&loc=en_US&cs=utf-8&lang=en
  http://www-1.ibm.com/support/docview.wss?uid=swg1IY61492
  http://www-1.ibm.com/support/docview.wss?uid=swg21181105
  http://www-1.ibm.com/support/docview.wss?uid=swg21181228
• Vendor URL: http://www-306.ibm.com/software/data/db2/udb/
• Other Advisory URL: http://www.nextgenss.com/advisories/db2-01.txt
  http://www.nextgenss.com/advisories/db205012005D.txt

• NGSSoftware Insight Security Research - nisrnextgenss.com - NGSSoftware Insight Security Research