CVE-2006-6638

https://notcve.org/view.php?id=CVE-2006-6638

IBM DB2 8.1 before FixPak 14 allows remote attackers to cause a denial of service via a crafted SQLJRA packet, which causes a NULL pointer dereference in the sqle_db2ra_as_recvrequest function in DB2ENGN.DLL, a different issue than CVE-2006-4257. IBM DB2 8.1 anterior a FixPak 14 permite a atacantes remotos provocar una denegación de servicio mediante un paquete SQLJRA artesanal, lo cual provoca una referencia a un puntero NULL en la función sqle_db2ra_as_recvrequest en DB2ENGN.DLL, un asunto diferente que CVE-2006-4257. • http://secunia.com/advisories/23397 http://www-1.ibm.com/support/docview.wss?uid=swg1IY91847 http://www.appsecinc.com/resources/alerts/db2/2006-11-30.shtml http://www.securityfocus.com/bid/21646 •