J-Security Center

Title: IBM DB2 Universal Database Server 'INSTALL_JAR' Arbitrary File Overwrite Vulnerability

Severity: MODERATE

Description:

IBM DB2 Universal Database Server is a database server designed to run on various platforms, including Linux, AIX, Solaris, and Microsoft Windows.

The application is prone to a vulnerability that could permit an attacker to overwrite arbitrary local files. This issue stems from an error in the 'INSTALL_JAR' application and may be exploited through unspecified procedure calls.

A remote, authenticated attacker can exploit this issue to create or overwrite arbitrary local files. This may lead to elevated privileges or a complete compromise of the vulnerable computer.

Affected Products:

  • IBM DB2 Universal Database 8.0
  • IBM DB2 Universal Database 8.0.0 FixPak 16
  • IBM DB2 Universal Database 8.0.0 FixPak 17
  • IBM DB2 Universal Database 8.1
  • IBM DB2 Universal Database 8.1 FixPak 15
  • IBM DB2 Universal Database 9.1
  • IBM DB2 Universal Database 9.1 Fix Pack 4a
  • IBM DB2 Universal Database 9.5
  • IBM DB2 Universal Database 9.5 Fix Pack 1
  • IBM DB2 Universal Database for AIX 8.0 FixPak 13
  • IBM DB2 Universal Database for AIX 8.0 FixPak 14
  • IBM DB2 Universal Database for AIX 8.0 FixPak 15
  • IBM DB2 Universal Database for AIX 8.0 FixPak 16
  • IBM DB2 Universal Database for AIX 8.0.0
  • IBM DB2 Universal Database for AIX 8.1 FixPak 14
  • IBM DB2 Universal Database for AIX 8.1 FixPak 15
  • IBM DB2 Universal Database for AIX 8.1.0
  • IBM DB2 Universal Database for AIX 8.1.13
  • IBM DB2 Universal Database for AIX 8.1.4
  • IBM DB2 Universal Database for AIX 8.1.5
  • IBM DB2 Universal Database for AIX 8.1.6
  • IBM DB2 Universal Database for AIX 8.1.6 c
  • IBM DB2 Universal Database for AIX 8.1.7
  • IBM DB2 Universal Database for AIX 8.1.7 b
  • IBM DB2 Universal Database for AIX 8.1.8
  • IBM DB2 Universal Database for AIX 8.1.8 a
  • IBM DB2 Universal Database for AIX 8.1.9
  • IBM DB2 Universal Database for AIX 8.1.9 a
  • IBM DB2 Universal Database for AIX 8.10.0
  • IBM DB2 Universal Database for AIX 8.12.0
  • IBM DB2 Universal Database for AIX 8.13
  • IBM DB2 Universal Database for AIX 8.2 FixPak 7
  • IBM DB2 Universal Database for AIX 8.2.0
  • IBM DB2 Universal Database for AIX 8.2.0 Fixpak 16
  • IBM DB2 Universal Database for AIX 9.0 Fix Pack 2
  • IBM DB2 Universal Database for AIX 9.0.0
  • IBM DB2 Universal Database for AIX 9.0.0 Fixpak 1
  • IBM DB2 Universal Database for AIX 9.1
  • IBM DB2 Universal Database for AIX 9.1
  • IBM DB2 Universal Database for AIX 9.1 FixPack 2
  • IBM DB2 Universal Database for AIX 9.1 FixPak 3
  • IBM DB2 Universal Database for AIX 9.1 FixPak 4
  • IBM DB2 Universal Database for AIX 9.1 FixPak 4a
  • IBM DB2 Universal Database for AIX 9.5
  • IBM DB2 Universal Database for AIX 9.5 FixPak 1
  • IBM DB2 Universal Database for HP-UX 8.0 FixPak 13
  • IBM DB2 Universal Database for HP-UX 8.0 FixPak 16
  • IBM DB2 Universal Database for HP-UX 8.0.0
  • IBM DB2 Universal Database for HP-UX 8.1 FixPak 14
  • IBM DB2 Universal Database for HP-UX 8.1 FixPak 15
  • IBM DB2 Universal Database for HP-UX 8.1.0
  • IBM DB2 Universal Database for HP-UX 8.1.4
  • IBM DB2 Universal Database for HP-UX 8.1.5
  • IBM DB2 Universal Database for HP-UX 8.1.6
  • IBM DB2 Universal Database for HP-UX 8.1.6 c
  • IBM DB2 Universal Database for HP-UX 8.1.7
  • IBM DB2 Universal Database for HP-UX 8.1.7 b
  • IBM DB2 Universal Database for HP-UX 8.1.8
  • IBM DB2 Universal Database for HP-UX 8.1.8 a
  • IBM DB2 Universal Database for HP-UX 8.1.9
  • IBM DB2 Universal Database for HP-UX 8.1.9 a
  • IBM DB2 Universal Database for HP-UX 8.2 FixPak 7
  • IBM DB2 Universal Database for HP-UX 8.2.0
  • IBM DB2 Universal Database for HP-UX 8.2.0 Fixpak 16
  • IBM DB2 Universal Database for HP-UX 9.0 Fix Pack 2
  • IBM DB2 Universal Database for HP-UX 9.0.0
  • IBM DB2 Universal Database for HP-UX 9.0.0 Fixpak 1
  • IBM DB2 Universal Database for HP-UX 9.1
  • IBM DB2 Universal Database for HP-UX 9.1 FixPack 2
  • IBM DB2 Universal Database for HP-UX 9.1 FixPak 3
  • IBM DB2 Universal Database for HP-UX 9.1 FixPak 4
  • IBM DB2 Universal Database for HP-UX 9.1 FixPak 4a
  • IBM DB2 Universal Database for HP-UX 9.1 Fixpak 4
  • IBM DB2 Universal Database for HP-UX 9.5
  • IBM DB2 Universal Database for HP-UX 9.5 FixPak 1
  • IBM DB2 Universal Database for Linux 8.0 FixPak 13
  • IBM DB2 Universal Database for Linux 8.0 FixPak 16
  • IBM DB2 Universal Database for Linux 8.0.0
  • IBM DB2 Universal Database for Linux 8.1 FixPak 14
  • IBM DB2 Universal Database for Linux 8.1 FixPak 15
  • IBM DB2 Universal Database for Linux 8.1.0
  • IBM DB2 Universal Database for Linux 8.1.4
  • IBM DB2 Universal Database for Linux 8.1.5
  • IBM DB2 Universal Database for Linux 8.1.6
  • IBM DB2 Universal Database for Linux 8.1.6 c
  • IBM DB2 Universal Database for Linux 8.1.7
  • IBM DB2 Universal Database for Linux 8.1.7 b
  • IBM DB2 Universal Database for Linux 8.1.8
  • IBM DB2 Universal Database for Linux 8.1.8 a
  • IBM DB2 Universal Database for Linux 8.1.9
  • IBM DB2 Universal Database for Linux 8.1.9 a
  • IBM DB2 Universal Database for Linux 8.2 FixPak 7
  • IBM DB2 Universal Database for Linux 8.2.0
  • IBM DB2 Universal Database for Linux 8.2.0 Fixpak 16
  • IBM DB2 Universal Database for Linux 9.0 Fix Pack 2
  • IBM DB2 Universal Database for Linux 9.0.0
  • IBM DB2 Universal Database for Linux 9.0.0 Fixpack 1
  • IBM DB2 Universal Database for Linux 9.1
  • IBM DB2 Universal Database for Linux 9.1 FixPack 2
  • IBM DB2 Universal Database for Linux 9.1 FixPak 3
  • IBM DB2 Universal Database for Linux 9.1 FixPak 4
  • IBM DB2 Universal Database for Linux 9.1 FixPak 4a
  • IBM DB2 Universal Database for Linux 9.1 Fixpak 4
  • IBM DB2 Universal Database for Linux 9.5
  • IBM DB2 Universal Database for Linux 9.5 FixPak 1
  • IBM DB2 Universal Database for Solaris 8.0 FixPak 13
  • IBM DB2 Universal Database for Solaris 8.0 FixPak 16
  • IBM DB2 Universal Database for Solaris 8.0.0
  • IBM DB2 Universal Database for Solaris 8.1 FixPak 14
  • IBM DB2 Universal Database for Solaris 8.1 FixPak 15
  • IBM DB2 Universal Database for Solaris 8.1.0
  • IBM DB2 Universal Database for Solaris 8.1.4
  • IBM DB2 Universal Database for Solaris 8.1.5
  • IBM DB2 Universal Database for Solaris 8.1.6
  • IBM DB2 Universal Database for Solaris 8.1.6 c
  • IBM DB2 Universal Database for Solaris 8.1.7
  • IBM DB2 Universal Database for Solaris 8.1.7 b
  • IBM DB2 Universal Database for Solaris 8.1.8
  • IBM DB2 Universal Database for Solaris 8.1.8 a
  • IBM DB2 Universal Database for Solaris 8.1.9
  • IBM DB2 Universal Database for Solaris 8.1.9 a
  • IBM DB2 Universal Database for Solaris 8.2 FixPak 7
  • IBM DB2 Universal Database for Solaris 8.2.0
  • IBM DB2 Universal Database for Solaris 8.2.0 Fixpak 16
  • IBM DB2 Universal Database for Solaris 9.0 Fix Pack 2
  • IBM DB2 Universal Database for Solaris 9.0.0
  • IBM DB2 Universal Database for Solaris 9.0.0 Fixpak 1
  • IBM DB2 Universal Database for Solaris 9.1
  • IBM DB2 Universal Database for Solaris 9.1 FixPack 2
  • IBM DB2 Universal Database for Solaris 9.1 FixPak 3
  • IBM DB2 Universal Database for Solaris 9.1 FixPak 4
  • IBM DB2 Universal Database for Solaris 9.1 FixPak 4a
  • IBM DB2 Universal Database for Solaris 9.1 Fixpak 4
  • IBM DB2 Universal Database for Solaris 9.5
  • IBM DB2 Universal Database for Solaris 9.5 FixPak 1
  • IBM DB2 Universal Database for Windows 8.0 FixPak 13
  • IBM DB2 Universal Database for Windows 8.0 FixPak 16
  • IBM DB2 Universal Database for Windows 8.0.0
  • IBM DB2 Universal Database for Windows 8.1 FixPak 14
  • IBM DB2 Universal Database for Windows 8.1 FixPak 15
  • IBM DB2 Universal Database for Windows 8.1.0
  • IBM DB2 Universal Database for Windows 8.1.4
  • IBM DB2 Universal Database for Windows 8.1.5
  • IBM DB2 Universal Database for Windows 8.1.6
  • IBM DB2 Universal Database for Windows 8.1.6 c
  • IBM DB2 Universal Database for Windows 8.1.7
  • IBM DB2 Universal Database for Windows 8.1.7 b
  • IBM DB2 Universal Database for Windows 8.1.8
  • IBM DB2 Universal Database for Windows 8.1.8 a
  • IBM DB2 Universal Database for Windows 8.1.9
  • IBM DB2 Universal Database for Windows 8.1.9 a
  • IBM DB2 Universal Database for Windows 8.2 FixPak 7
  • IBM DB2 Universal Database for Windows 8.2.0
  • IBM DB2 Universal Database for Windows 8.2.0 Fixpak 16
  • IBM DB2 Universal Database for Windows 9.0 Fix Pack 2
  • IBM DB2 Universal Database for Windows 9.1
  • IBM DB2 Universal Database for Windows 9.1
  • IBM DB2 Universal Database for Windows 9.1 FixPack 2
  • IBM DB2 Universal Database for Windows 9.1 FixPak 3
  • IBM DB2 Universal Database for Windows 9.1 FixPak 4
  • IBM DB2 Universal Database for Windows 9.5
  • IBM DB2 Universal Database for Windows 9.5 Fix Pak 1

References:

Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.