CVE-2003-0827: Medium severity IBM DB2 Universal Database vulnerability

Published Sep 23, 2003

Updated

The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial of service (crash) via a long packet to UDP port 523.

Affected Software

2 affected components

IBM DB2 Universal Database=7.1

IBM DB2 Universal Database=7.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM DB2 Universal Database (DB2 Discovery Service) to a version that resolves this vulnerability.
Patch FixPak 10a

Event History

Sep 23, 2003

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Oct 6, 2003

Data Sourced

via NVD·04:00 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2003-0827?

CVE-2003-0827 has been classified as a high severity vulnerability due to its potential to cause a denial of service.

How do I fix CVE-2003-0827?

To mitigate CVE-2003-0827, upgrade IBM DB2 to FixPak 10a or later.

Which versions are affected by CVE-2003-0827?

CVE-2003-0827 affects IBM DB2 Universal Database versions 7.1 and 7.2 on Linux.

Can CVE-2003-0827 be exploited remotely?

Yes, CVE-2003-0827 can be exploited remotely by sending a specially crafted long packet to UDP port 523.

What impact does CVE-2003-0827 have on the system?

The impact of CVE-2003-0827 is a denial of service, which may crash the DB2 Discovery Service.