CVE-2006-3067: Buffer Overflow
Multiple unspecified vulnerabilities in IBM DB2 Universal Database (UDB) before 8.1 FixPak 12 allow remote attackers to cause a denial of service (application crash) via a (1) "long column list" in the (a) REPLACE INTO and (b) INSERT INTO portions of the LOAD command or a (2) large number of values in an IN clause, possibly related to a buffer overflow.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3067?
CVE-2006-3067 is classified as a moderate severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2006-3067?
To mitigate CVE-2006-3067, upgrade to IBM DB2 Universal Database version 8.1 FixPak 12 or later.
What types of vulnerabilities are involved in CVE-2006-3067?
CVE-2006-3067 involves unspecified vulnerabilities that can lead to application crashes through long column lists in LOAD commands.
Can CVE-2006-3067 be exploited remotely?
Yes, CVE-2006-3067 can be exploited remotely by attackers to cause denial of service.
Which versions of IBM DB2 are affected by CVE-2006-3067?
CVE-2006-3067 affects IBM DB2 Universal Database versions prior to 8.1 FixPak 12.