Vulnerability Scanning Solutions, LLC.
Home
Our Process
Residential
Corporate
What We Scan For
Sample Report
Client List
Terms
Contact Us
What We Scan For
Family: Denial of Service --> Category: denial

DB2 discovery service DOS Vulnerability Scan


Vulnerability Scan Summary
A large UDP packet kills the remote service

Detailed Explanation for this Vulnerability Test

Synopsis :

The remote service is prone to a denial of service attack.

Description :

It was possible to crash the DB2 UDP-based discovery listener on the
remote host by sending it a packet with more than 20 bytes. An
unauthenticated attacker may use this attack to make this service
crash continuously, thereby denying service to legitimate users.

See also :

http://www.securityfocus.com/archive/1/338234/30/0/threaded
http://www.nessus.org/u?8d0c33a1

Solution:

Apply FixPack 10a or later.

Threat Level:

Low / CVSS Base Score : 2
(AV:R/AC:L/Au:NR/C:N/A:P/I:N/B:N)

Click HERE for more information and discussions on this network vulnerability scan.

VSS, LLC.

P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.