[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] Memory leak in DB2 sqlcctcpgetbuffer process, vulnerability or not?

To: Henk van de Tillaerdt <vandetillaerdt@xxxxxxxxx>
Subject: Re: [Full-disclosure] Memory leak in DB2 sqlcctcpgetbuffer process, vulnerability or not?
From: "Graham Reed" <greed@xxxxxxxxx>
Date: Mon, 09 May 2005 11:19:23 -0400

Henk van de Tillaerdt writes:

Sun released an alert about a memory leak in the sqlcctcpgetbuffer
process of DB2:

I'm wondering, is this a vulnerability or not?

Can't answer your other questions, but memory leaks lead to exhausted memory which gives you a denial-of-service attack.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

References:
- [Full-disclosure] Memory leak in DB2 sqlcctcpgetbuffer process, vulnerability or not?
  - From: Henk van de Tillaerdt

Prev by Date: Re: [Full-disclosure] H-Sphere
Next by Date: Re: [Full-disclosure] PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too)
Previous by thread: [Full-disclosure] Memory leak in DB2 sqlcctcpgetbuffer process, vulnerability or not?
Next by thread: Re: [Full-disclosure] PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too)
Index(es):
- Date
- Thread