IBM Windows DB2 DoS

Hi everybody.

IBM DB2 for Windows (98/NT/2000) run 2 services : db2ccs.exe (listening on
port 6790) and db2jds.exe (port 6789).
I may be wrong but these services are used to access data remotely and to
remotely manage the database.

Both can be crashed remotely: just telnet on their port, send one byte and
then close the connexion, that's all.

IBM is aware of that. They reproduced the problem and say that a patch will
be availlable in july (so this month) for version 7 and above.

Regards,

Gilles

Ce message йlectronique et tous les fichiers attachйs qu'il contient
sont confidentiels et destinйs exclusivement а l'usage de la personne
а laquelle ils sont adressйs. Si vous avez reзu ce message par erreur,
merci de le retourner а son йmetteur. Les idйes et opinions prйsentйes
dans ce messages sont celles de son auteur, et ne reprйsentent pas
nйcessairement celles du Groupe HAYS plc ou d'une quelconque de ses filiales.
La publication, l'usage, la distribution, l'impression ou la copie non
autorisйe de ce message et des attachements qu'il contient sont strictement
interdits.

Nous vous informons йgalement que nous avons vйrifiй l'absence de virus dans
ce message mais que, malgrй ce contrфle, nous ne saurions кtre tenus pour
responsables d'йventuels dйgвts occasionnйs par un virus non dйtectй.

This e-mail and any attached files are confidential and intended
solely for the use of the individual to whom it is addressed. If you have
received this email in error please send it back to the person that sent it
to you. Any views or opinions presented are solely those of author and
do not necessarily represent those the HAYS plc group or any of its subsidiary
companies. Unauthorized publication, use, dissemination, forwarding, printing
or copying of this email and its associated attachments is strictly prohibited.

We also inform you that we have checked that this message does not contain
any virus but we decline any responsability in case of any damage caused
by an a non detected virus.