Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2001-1143: IBM DB2 7.0 can crash when hit with malformed byte

CVE-2001-1143 · published 25 years ago

Summary

A remote user can send a single malformed byte to the DB2 services listening on ports 6790 or 6789, causing the DB2 processes to stop unexpectedly. This results in a denial of service, meaning the database becomes unavailable to legitimate users. Apply the latest IBM DB2 patches or upgrade to a newer version to stop the crash from happening.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
ibm	db2_universal_database	7.0 `cpe:2.3:a:ibm:db2_universal_database:7.0::linux:::::`

Original advisory text

IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6790, or (2) db2jds.exe on port 6789.

References

http://www.iss.net/security_center/static/6832.php Vendor Advisory
http://www.iss.net/security_center/static/6833.php Vendor Advisory
http://www.securityfocus.com/archive/1/196140 Vendor Advisory
http://www.securityfocus.com/bid/3010 Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

5.0 Medium

Exploitation

2% chance of attack within 30 days

Timeline

Published11 Jul 2001

Updated3 Nov 2026

First seen29 Sep 2026

Sources

CVE-2001-1143 · NVD

Track software like this

Free during beta