-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================
AA-2009.0135                  AUSCERT Advisory

                     [Win][Linux][HP-UX][Solaris][AIX]
                 DB2 9.5 and 9.1: Multiple vulnerabilities
                                4 June 2009
- ---------------------------------------------------------------------------

        AusCERT Advisory Summary
        ------------------------

Product:              DB2 v9.5 prior to Fix Pack 4
                      DB2 v9.1 prior to Fix Pack 7
Operating System:     Linux variants
                      Windows
                      AIX
                      HP-UX
                      Solaris
Impact:               Increased Privileges
                      Denial of Service
Access:               Remote/Unauthenticated
CVE Names:            CVE-2009-1906 CVE-2009-1905
Member content until: Thursday, July 02 2009

OVERVIEW:

        Fix Pack 4 for DB2 v9.5 and Fix Pack 7 for DB2 v9.1 are available
        and correct multiple vulnerabilities. [1]


IMPACT:

        Two vulnerabilities have been identified:

        CVE-2009-1906 addresses a Denial of Service vulnerability using
        an IPv6 address. [2]

        CVE-2009-1905 addresses an increased privileges vulnerability
        whereby a remote user can bypass password authentication. [3]


MITIGATION:

        Fix Pack 4 has been released for DB2 v9.5 to correct these
        vulnerabilities. [4]

        Users of DB2 v9.1 should upgrade to Fix Pack 7. [5]



REFERENCES:

        [1] Security and HIPER APARs fixed in DB2 for Linux, UNIX,
            and Windows Version 9.5 Fix Pack 4
            http://www-01.ibm.com/support/docview.wss?uid=swg21386689

        [2] CVE-2009-1906
            http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-1906

        [3] CVE-2009-1905
            http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-1905

        [4] DB2 Version 9.5 Fix Pack 4 for Linux, UNIX, and Windows
            http://www-01.ibm.com/support/docview.wss?rs=71&uid=swg24023213

        [5] DB2 Version 9.1 Fix Pack 7 for Linux, UNIX and Windows
            http://www-01.ibm.com/support/docview.wss?rs=71&uid=swg24022678

AusCERT has made every effort to ensure that the information contained
in this document is accurate.  However, the decision to use the information
described is the responsibility of each user or organisation. The decision to
follow or act on information or advice contained in this security bulletin is
the responsibility of each user or organisation, and should be considered in
accordance with your organisation's site policies and procedures. AusCERT
takes no responsibility for consequences which may arise from following or
acting on information or advice contained in this security bulletin.

If you believe that your computer system has been compromised or attacked in 
any way, we encourage you to let us know by completing the secure National IT 
Incident Reporting Form at:

        http://www.auscert.org.au/render.html?it=3192

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================

-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iD8DBQFKJ12UNVH5XJJInbgRAsTxAJ48ooG6QxHEp01/87jFwBvvmjL9hACfdq2a
80GNpTsQqMCptgEfd40lO60=
=OOg2
-----END PGP SIGNATURE-----