|
Family: Denial of Service --> Category: denial
DB2 discovery service DOS Vulnerability Scan
Vulnerability Scan Summary A large UDP packet kills the remote service
Detailed Explanation for this Vulnerability Test
Synopsis :
The remote service is prone to a denial of service attack.
Description :
It was possible to crash the DB2 UDP-based discovery listener on the
remote host by sending it a packet with more than 20 bytes. An
unauthenticated attacker may use this attack to make this service
crash continuously, thereby denying service to legitimate users.
See also :
http://www.securityfocus.com/archive/1/338234/30/0/threaded
http://www.nessus.org/u?8d0c33a1
Solution:
Apply FixPack 10a or later.
Threat Level:
Low / CVSS Base Score : 2
(AV:R/AC:L/Au:NR/C:N/A:P/I:N/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|