CVE-2010-3740
First published: Tue Oct 05 2010(Updated: )
The Net Search Extender (NSE) implementation in the Text Search component in IBM DB2 UDB 9.5 before FP6a does not properly handle an alphanumeric Fuzzy search, which allows remote authenticated users to cause a denial of service (memory consumption and system hang) via the db2ext.textSearch function.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ibm Db2 | =9.5 | |
| Ibm Db2 | =9.5-fp4 | |
| Ibm Db2 | =9.5-fp5 | |
| Ibm Db2 | =9.5-fp4a | |
| Ibm Db2 | =9.5-fp1 | |
| Ibm Db2 | =9.5-fp2a | |
| Ibm Db2 | =9.5-fp3b | |
| Ibm Db2 | =9.5-fp2 | |
| Ibm Db2 | =9.5-fp3 | |
| Ibm Db2 | =9.5-fp3a |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-historical
- collector/nvd-index
- vendor/ibm
- canonical/ibm db2
- version/ibm db2/9.5
- version/ibm db2/9.5-fp4
- version/ibm db2/9.5-fp5
- version/ibm db2/9.5-fp4a
- version/ibm db2/9.5-fp1
- version/ibm db2/9.5-fp2a
- version/ibm db2/9.5-fp3b
- version/ibm db2/9.5-fp2
- version/ibm db2/9.5-fp3
- version/ibm db2/9.5-fp3a