IBM DB2 contains a flaw that may allow a remote denial of service. The issue is triggered when a remote user sends a signal to the semaphore that shuts down the instance of DB2 UBD, and will result in loss of availability for the service.

Users of DB2 8.1 should upgrade to version Fixpack 7 or higher, as it has been reported to fix this vulnerability. Users of DB2 7.x should upgrade to version Fixpack 12 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• Security Tracker: 1011562
• Related OSVDB ID: 10513 10514 10515 10516 10517 10518 10519 10520 10522 10523
• Secunia Advisory ID: 12733
• ISS X-Force ID: 17609
• Keyword: APAR IY62305
• Vendor Specific Advisory URL: http://www-1.ibm.com/support/docview.wss?rs=71&context=SSEPGG&uid=swg21179535&loc=en_US&cs=utf-8&lang=en
  http://www-1.ibm.com/support/docview.wss?uid=swg1IY62305
  http://www-1.ibm.com/support/docview.wss?uid=swg21181105
  http://www-1.ibm.com/support/docview.wss?uid=swg21181228
• Vendor Specific News/Changelog Entry: http://www-1.ibm.com/support/docview.wss?uid=swg1IY62305
• Other Advisory URL: http://www.nextgenss.com/advisories/db2-01.txt

• NGSSoftware Insight Security Research - nisrnextgenss.com - NGSSoftware Insight Security Research

NVD does not currently have a CVSSv2 score assigned.