TZ Advisores - Buffer Overflow in IBM U2 UniVerse ODBC

["Claudio Ortiz Meinberg" <cmeinberg () sistran com br>]

Systems Affecteds:

All UniVerse versions with UV/ODBC


Explanation:

Trying to make an invalid query the client crashes and make the server slow
with 5sec to 2min lag what could crash the server.


Expoit:

Make a query accessing UV/ODBC (I've used CrystalReports all versions) and
make a valid/invalid link between tables, it will make the server crash, the
line will be locked and the file too.


Resolution:

Just boot the server, it will stop the lag and release the locked line and
file