A vulnerability has been reported in IBM DB2, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the "validateUser()" function in db2dasrrm while processing the "username" parameter and can be exploited to cause a stack-based buffer overflow via an overly long string.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in the following versions:
* IBM DB2 versions prior to 9.1 Fix Pack 10.
* IBM DB2 versions prior to 9.5 Fix Pack 6a.
* IBM DB2 versions prior to 9.7 Fix Pack 3.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Intevydis via ZDI.

Changelog
Further details available to Secunia VIM customers

Original Advisory
IBM (IC70538, IC69986, IC70539):
http://www-01.ibm.com/support/docview.wss?uid=swg21293566
http://www-01.ibm.com/support/docview.wss?uid=swg1IC70538
http://www-01.ibm.com/support/docview.wss?uid=swg1IC69986
http://www-01.ibm.com/support/docview.wss?uid=swg1IC70539

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-11-035/

Deep Links
Links available to Secunia VIM customers