Stack-based buffer overflow in db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to execute arbitrary code via a long DASPROF environment variable.
| Software | From | Fixed in |
|---|---|---|
| ibm / db2_universal_database | 8 | 8.x |
| ibm / db2_universal_database | 9.1 | 9.1.x |
| ibm / db2_universal_database | 9.5 | 9.5.x |