Stack overflow

Stack-based buffer overflow in the validateUser implementation in the com.ibm.db2.das.core.DasSysCmd function in db2dasrrm in the DB2 Administration Server DAS component in IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP3 allows remote attackers to execute arbitrary code via a long...

CVE-2010-3474

IBM DB2 9.7 before FP3 does not perform the expected drops or invalidations of dependent functions upon a loss of privileges by the functions' owners, which allows remote authenticated users to bypass intended access restrictions via calls to these functions, a different vulnerability than...

CVE-2010-3474

CVE-2010-3474 affects IBM DB2 9.7 prior to Fix Pack 3. The issue is that when privileges on a database object are revoked, dependent functions are not dropped/invalidated, enabling remote authenticated users to bypass intended access restrictions by calling those functions. The vulnerability is t...

IBM DB2 SYSIBMADM Multiple Vulnerabilities (Sep10)

The host is running IBM DB2 and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmdb2sysibmadmmultvulnsep10.nasl 7585 2017-10-26 15:03:01Z cfischer $ IBM DB2 SYSIBMADM Multiple Vulnerabilities Sep10 Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Code injection

IBM DB2 9.7 before FP2, when AUTOREVAL is IMMEDIATE, allows remote authenticated users to cause a denial of service loss of privileges to a view owner by defining a dependent view...

CVE-2010-3197

IBM DB2 9.7 before FP2 does not perform the expected access control on the monitor administrative views in the SYSIBMADM schema, which allows remote attackers to obtain sensitive information via unspecified vectors...

Code injection

The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S9 and 9.73P before 9.73P9 allows remote attackers to cause a denial of service device crash via a malformed header, aka Bug ID CSCsk04588...

Code injection

The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S11 and 9.73P before 9.73P11 allows remote attackers to cause a denial of service device crash via a long message, aka Bug ID CSCsk44115...

CVE-2010-1565

Cisco PGW 2200 Softswitch SIP/MGCP stack is affected by multiple remote DoS vulnerabilities (CVE-2010-1565 among others). Exploitation can exhaust TCP sockets and prevent new connections; affected releases include Cisco PGW 2200 Softswitch 9.7(3)S before 9.7(3)S9 and 9.7(3)P before 9.7(3)P9. Cisc...

IBM DB2 'REPEAT()' Heap Buffer Overflow Vulnerability

The host is installed with IBM DB2 and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbibmdb2bofvulnlinfeb10.nasl 5306 2017-02-16 09:00:16Z teissa $ IBM DB2 'REPEAT' Heap Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone Networks...

CVE-2010-0472

kuddb2 in Tivoli Monitoring for DB2, as distributed in IBM DB2 9.7 FP1 on Linux, allows remote attackers to cause a denial of service daemon crash via a certain byte sequence...

IBM DB2 - 'kuddb2' Remote Denial of Service

source: https://www.securityfocus.com/bid/38018/info IBM DB2 is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the application to crash, denying service to legitimate users. IBM DB2 9.7 is vulnerable; other versions may also be affected. The followi...

IBM DB2 - REPEAT() Local Heap Buffer Overflow

IBM DB2 - REPEAT Local Heap Buffer Overflow source: https://www.securityfocus.com/bid/37976/info IBM DB2 is prone to a heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute...

IBM DB2 - 'REPEAT()' Local Heap Buffer Overflow

source: https://www.securityfocus.com/bid/37976/info IBM DB2 is prone to a heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code with elevated privileges or crash...

IBM Db2 Multiple Unspecified Vulnerabilities - Windows

IBM Db2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2"; ifdescription...

IBM DB2 Multiple Unspecified Vulnerabilities (Windows)

The host is installed with IBM DB2 and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmdb2multunspecifiedvulnwin.nasl 5055 2017-01-20 14:08:39Z teissa $ IBM DB2 Multiple Unspecified Vulnerabilities Windows Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod,...

IBM DB2 Self Tuning Memory Manager (STMM) DOS Vulnerability (Linux)

The host is installed with IBM DB2 and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodibmdb2stmmdosvulnlin.nasl 5055 2017-01-20 14:08:39Z teissa $ IBM DB2 Self Tuning Memory Manager STMM DOS Vulnerability Linux Authors: Antu Sanadi Updated By: Antu Sanadi on...

IBM DB2 Client Interfaces component Unspecified Vulnerabilities (Windows)

The host is installed with IBM DB2 and is prone to unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmdb2clntintrfcunspecifiedvulnwin.nasl 5055 2017-01-20 14:08:39Z teissa $ IBM DB2 Client Interfaces component Unspecified Vulnerabilities Windows Authors: Antu Sanadi Copyright:...

IBM DB2 Self Tuning Memory Manager (STMM) DOS Vulnerability (Windows)

The host is installed with IBM DB2 and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodibmdb2stmmdosvulnwin.nasl 5055 2017-01-20 14:08:39Z teissa $ IBM DB2 Self Tuning Memory Manager STMM DOS Vulnerability Windows Authors: Antu Sanadi Updated By: Antu Sanadi on...

SOL10898 - DNSSEC BIND vulnerability - CVE-2009-4022

Vulnerability description and product information: Unspecified vulnerability in ISC BIND 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, 9.7 beta before 9.7.0b3, and 9.0.x through 9.3.x with DNSSEC validation enabled and checking disabled CD, allows remote attackers to conduct DNS...