port 446 vulnerability

[T G Manikandan]

We need to open port 446 for the db2 access.
Are there any vulnerabilities?

THanks

[Michael Tully · Accepted solution]

As far as I'm aware there isn't any for port 446.

I checked http://www.cert.org

Cheers
Michael

[Bill Hassell]

The port itself (like any other port) isn't the issue, it's the daemon or program that uses the port. As long as the code monitoring the port performs reliable authentication and sanity checks on the incoming requests and data, it should be fine. The SQLslammer was an example of an exploit for a database port, fixed with a patch to the monitoring program.

[Yogeeraj_1]

hi,

"All data is fraudulent.
All communications are attempted hacks.
All clients are thieves.
Technology is only my first line of defense"
- morning litany for a Web Server Administrator


Also, Bill Hassel said it right:
"The port itself (like any other port) isn't the issue, it's the daemon or program that uses the port."

I recently went through a white paper (attached) which clearly explains the "SQL Injection". Go through it and you can then assess the vulnerability of your port 446.

I would also recommend reading of I recommend reading
eXtropia.com???s ???Introduction to Databases for Web Developers??? at
http://www.extropia.com/tutorials/sql/toc.html.

hth
yogeeraj