CVE Database
/

CVE-2010-3740

Back to search

CVE-2010-3740

Published: Oct 5, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

The Net Search Extender (NSE) implementation in the Text Search component in IBM DB2 UDB 9.5 before FP6a does not properly handle an alphanumeric Fuzzy search, which allows remote authenticated users to cause a denial of service (memory consumption and system hang) via the db2ext.textSearch function.

VendorProductVersions

n/a

n/a

affected
n/a

References

IC66613
vendor-advisory
x_refsource_AIXAPAR
oval:org.mitre.oval:def:13811
vdb-entry
signature
x_refsource_OVAL

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now