CVE-2009-0172

Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote attackers to cause a denial of service (infinite loop) via a crafted CONNECT data stream.

• CWE-20

• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT
• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT
• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT
• http://secunia.com/advisories/33529Vendor Advisory
• http://securitytracker.com/id?1021591
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ37696
• http://www-01.ibm.com/support/docview.wss?uid=swg21363936Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ36534Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ37697Patch, Vendor Advisory
• http://www.securityfocus.com/bid/33258Patch
• http://www.vupen.com/english/advisories/2009/0137
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47931
• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT
• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT
• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT
• http://secunia.com/advisories/33529Vendor Advisory
• http://securitytracker.com/id?1021591
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ37696
• http://www-01.ibm.com/support/docview.wss?uid=swg21363936Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ36534Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ37697Patch, Vendor Advisory
• http://www.securityfocus.com/bid/33258Patch
• http://www.vupen.com/english/advisories/2009/0137
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47931

Published

Jan 16, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0166The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 an…
• CVE-2009-0167Unspecified vulnerability in lpadmin in Sun Solaris 10 and O…
• CVE-2009-0168Unspecified vulnerability in ppdmgr in Sun Solaris 10 and Op…
• CVE-2009-0169Sun Java System Access Manager 7.1 allows remote authenticat…
• CVE-2009-0170Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1…
• CVE-2009-0171The Sun SPARC Enterprise M4000 and M5000 Server, within a ce…
• CVE-2009-0173Unspecified vulnerability in the server in IBM DB2 8 before …
• CVE-2009-0174Stack-based buffer overflow in VUPlayer 2.49 allows remote a…
• CVE-2009-0175Heap-based buffer overflow in Heathco Software MP3 TrackMake…
• CVE-2009-0176Multiple heap-based buffer overflows in the PDF distiller in…
• CVE-2009-0177vmwarebase.dll, as used in the vmware-authd service (aka vmw…
• CVE-2009-0178Unspecified vulnerability in IBM Hardware Management Console…