CVE-2007-2582

Multiple buffer overflows in the DB2 JDBC Applet Server (DB2JDS) service in IBM DB2 9.x and earlier allow remote attackers to (1) execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via (2) an invalid LANG parameter or (2) a long packet that generates a "MemTree overflow."

• CWE-119

• http://osvdb.org/40973
• http://osvdb.org/40975
• http://secunia.com/advisories/25148Patch, Vendor Advisory
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY97750&apar=only
• http://www.securityfocus.com/archive/1/482024/100/0/threaded
• http://www.securityfocus.com/bid/23890
• http://www.securityfocus.com/bid/26010
• http://www.securitytracker.com/id?1018029
• http://www.securitytracker.com/id?1018801
• http://www.vupen.com/english/advisories/2007/1707Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-07-056.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34184
• http://osvdb.org/40973
• http://osvdb.org/40975
• http://secunia.com/advisories/25148Patch, Vendor Advisory
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY97750&apar=only
• http://www.securityfocus.com/archive/1/482024/100/0/threaded
• http://www.securityfocus.com/bid/23890
• http://www.securityfocus.com/bid/26010
• http://www.securitytracker.com/id?1018029
• http://www.securitytracker.com/id?1018801
• http://www.vupen.com/english/advisories/2007/1707Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-07-056.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34184

Published

May 10, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2576Buffer overflow in the East Wind Software advdaudio.ocx 1.5.…
• CVE-2007-2577Multiple SQL injection vulnerabilities in ACP3 4.0 beta 3 al…
• CVE-2007-2578Unspecified vulnerability in search/list/action_search/index…
• CVE-2007-2579Multiple cross-site scripting (XSS) vulnerabilities in ACP3 …
• CVE-2007-2580Unspecified vulnerability in Apple Safari allows local users…
• CVE-2007-2581Multiple cross-site scripting (XSS) vulnerabilities in Micro…
• CVE-2007-2583The in_decimal::set function in item_cmpfunc.cc in MySQL bef…
• CVE-2007-2584Buffer overflow in the IsOldAppInstalled function in the McS…
• CVE-2007-2585Stack-based buffer overflow in the Verify function in the Ba…
• CVE-2007-2586The FTP Server in Cisco IOS 11.3 through 12.4 does not prope…
• CVE-2007-2587The IOS FTP Server in Cisco IOS 11.3 through 12.4 allows rem…
• CVE-2007-2588Multiple buffer overflows in the Office Viewer OCX ActiveX c…