Secunia

Some vulnerabilities have been reported in IBM DB2, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.

1) A boundary error in the DB2JDS service can be exploited to cause a stack-based buffer overflow by sending a specially crafted packet to default port 6789/TCP.

Successful exploitation allows execution of arbitrary code.

2) Two errors in the DB2JDS service can be exploited to cause a DoS when processing an invalid LANG parameter or by sending a 32768-byte packet to the service.

The vulnerabilities are reported in versions 8.1 and 8.2. Other versions may also be affected.

Solution
Update to DB2 UDB Version 8.1 FixPak 15 (also known as Version 8.2 FixPak 8).
Further details available in Customer Area

Provided and/or discovered by
Discovered by an anonymous researcher and reported via ZDI.

Changelog
Further details available in Customer Area

Original Advisory
IBM:
http://www-1.ibm.com/support/docview.wss?uid=swg1IY97750

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-07-056.html

Deep Links
Links available in Customer Area