Security Bulletin: DB2 Denial of Service Vulnerability in DRDA (CVE-2012-2180)

Abstract Vulnerability in IBM DB2 server products could allow a specially-crafted DRDA request to cause disruption to the server. Content VULNERABILITY DETAILS CVE ID: CVE-2012-2180 DESCRIPTION: A vulnerability in the IBM DB2 products listed below could allow an unauthenticated, remote attacker t...

Security Bulletin: Unauthorized Access to Table Vulnerability in DB2 (CVE-2012-0709)

Abstract Vulnerability in IBM DB2 could allow an authenticated user to view data from a table to which they do not have privilege. Content VULNERABILITY DETAILS CVE ID: CVE-2012-0709 DESCRIPTION: The IBM DB2 products listed below contain a security vulnerability which would allow an authenticated...

Security Bulletin: DB2 Denial of Service Vulnerability in DRDA (CVE-2012-0710)

Abstract Vulnerability in IBM DB2 server products could allow a specially-crafted DRDA request to crash the server. Content VULNERABILITY DETAILS CVE ID: CVE-2012-0710 DESCRIPTION: A vulnerability in the IBM DB2 products listed below could allow an unauthenticated, remote attacker to sent a...

Security Bulletin: Remote Escalation of Privilege Vulnerability in DB2 Administration Server (CVE-2012-0711)

Abstract Vulnerability in IBM DB2 Administrator Server could allow an escalation of privilege attack. Content VULNERABILITY DETAILS CVE ID: CVE-2012-0711 DESCRIPTION: The IBM DB2 products listed below contain a security vulnerability in the DB2 Administration Server DAS which would allow an...

Security Bulletin: Unauthorized Access to Table Vulnerability in DB2 (CVE-2013-4033)

Abstract A vulnerability in IBM DB2 could allow an authenticated user holding EXPLAIN authority to temporarily gain SELECT, INSERT, UPDATE or DELETE privilege on a table. Content VULNERABILITY DETAILS CVE ID: CVE-2013-4033 DESCRIPTION: The IBM DB2 products listed below contain a security...

Security Bulletin: DB2 Recovery Expert for Linux, UNIX and Windows is affected by a vulnerability in IBM Java (CVE-2013-5780)

Abstract An unspecified vulnerability in IBM's JRE related to the Libraries component could allow a remote attacker to obtain sensitive information. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-5780 CVSS: CVSS Base Score: 4.3 CVSS Temporal Score: See...

Security Bulletin: IBM InfoSphere Optim Performance Manager affected by vulnerability in IBM Java Runtime Environment (CVE-2013-4002)

Abstract Unspecified vulnerability in the IBM Java Runtime Environment JRE in IBM Java allows remote attackers to affect availability via unknown vectors. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-4002 CVSS: CVSS Base Score: 7.1 CVSS Temporal Score: See...

Security Bulletin: IBM PureData System for Operational Analytics A1791 is affected by a directory traversal arbitrary file download vulnerability in the database performance monitor (CVE-2013-2979)

Abstract The IBM PureData System for Operational Analytics A1791 includes IBM Optim Performance Manager OPM for DB2 for Linux, Unix, and Windows. There is a vulnerability with OPM that could allow users to access files and directories that are stored outside the OPM installation directory which...

Security Bulletin: Multiple vulnerabilities exist in IBM Data Studio Web Console, Optim Performance Manager, IBM InfoSphere Optim Configuration Manager, and DB2 Recovery Expert for Linux, UNIX and Windows (CVE-2013-4025, CVE-2013-4024, CVE-2013-4022)

Abstract Multiple vulnerabilities exist in IBM Data Studio Web Console, Optim Performance Manager, IBM InfoSphere Optim Configuration Manager, and DB2 Recovery Expert for Linux, UNIX and Windows which could allow an attacker to view sensitive information or perform actions as a compromised user...

Security Bulletin: IBM InfoSphere Balanced Warehouse C3000, C4000, and D5100 and IBM Smart Analytics System 1050, 2050, 5600, 5710, 7600, 7700 and 7710 are affected by an unauthorized access to table vulnerability in IBM DB2 (CVE-2013-4033)

Abstract A vulnerability in IBM DB2 for Linux, UNIX, and Windows could allow an authenticated user holding EXPLAIN authority to temporarily gain SELECT, INSERT, UPDATE or DELETE privilege on a table. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-4033 IBM InfoSphere Balanced Warehouse C3000,...

Security Bulletin: IBM InfoSphere Balanced Warehouse D5100 and IBM Smart Analytics System 5600 are affected by a privilege escalation vulnerability in the DB2 Audit Facility (CVE-2013-3475)

Abstract IBM InfoSphere Balanced Warehouse D5100 and IBM Smart Analytics System 5600 are shipped with DB2 9.7. This version of DB2 contains a security vulnerability in the DB2 Audit Facility which allows an attacker to gain DB2 instance owner level privileges. This vulnerability can only be...

Security Bulletin: Denial of Service Vulnerability in DB2 for Unix, Linux and Windows's Fast Communications Manager. (CVE-2013-4032)

Abstract Vulnerability in IBM DB2 for Unix, Linux and Windows server products could allow arbitrary data sent to the Fast Communications Manager FCM to cause server denial of service. Content VULNERABILITY DETAILS CVE ID: CVE-2013-4032 DESCRIPTION: A vulnerability in the IBM DB2 products listed...

Security Bulletin: InfoSphere Optim Performance Manager affected by vulnerability in IBM JAVA JRE (CVE-2013-0169)

Abstract IBM InfoSphere Optim Performance Manager uses the IBM Java Runtime Environment JRE and is affected by a vulnerability in the IBM JRE. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-0169 DESCRIPTION: The TLS protocol does not properly consider timing side-channel attacks, which allows...

Security Bulletin: DB2 Recovery Expert for Linux, UNIX and Windows affected by vulnerability in IBM Java JRE (CVE-2013-0169)

Abstract IBM DB2 Recovery Expert for Linux, UNIX and Windows uses the IBM Java Runtime Environment JRE and is affected by a vulnerability issue in the IBM JRE. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-0169 DESCRIPTION: The TLS protocol does not properly consider timing side-channel attacks...

Security Bulletin: Multiple GSKit Vulnerabilities in IBM DB2 (CVE-2012-2190, CVE-2012-2191, CVE-2012-2203).

Abstract GSKit is an IBM product that is used by IBM DB2 for SSL support. The GSKit that is shipped with DB2 contains multiple security vulnerabilities. By default, DB2 does not use SSL for client-server communication and therefore, this vulnerability affects DB2 only if SSL is enabled. Content...

Security Bulletin: Security vulnerability in IBM InfoSphere Guardium S-TAP for DB2 on z/OS (CVE-2013-0490)

Abstract An unspecified vulnerability in IBM InfoSphere Guardium S-TAP for DB2 on z/OS v8.1 could allow local attackers to execute arbitrary commands via unknown vectors. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-0490 CVSS: CVSS Base Score: 7.2 CVSS Temporal Score: See...

Security Bulletin: Multiple vulnerabilities in IBM DB2 Performance Expert and IBM InfoSphere Optim Performance Manager due to vulnerabilities in IBM Java Runtime Environment (CVE-2012-1720, CVE-2012-5081).

Abstract DB2® Performance Expert and InfoSphere® Optim™ Performance Manager use the IBM® Java™ Runtime Environment JRE and might be affected by vulnerabilities in the IBM JRE. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-1720 DESCRIPTION: An unspecified vulnerability in the JRE component allow...

Security Bulletin: IBM DB2 Security Vulnerability in SQLJ.DB2_INSTALL_JAR (CVE-2012-2194).

Abstract Vulnerability in IBM DB2 could allow an authenticated user, without proper authorization, to overwrite JAR files. Content VULNERABILITY DETAILS CVE ID: CVE-2012-2194 DESCRIPTION: The IBM DB2 products listed below contain a security vulnerability that could allow an authenticated user,...

Security Bulletin: DB2 Escalation of Privilege Vulnerability (CVE-2011-4061)

Abstract The IBM Tivoli Monitoring Agent shipped with IBM DB2 V9.5 and V9.7 products contains an escalation of privilege vulnerability. Content VULNERABILITY DETAILS CVE ID: CVE-2011-4061 DESCRIPTION: The IBM DB2 products listed below bundle IBM Tivoli Monitoring Agent ITMA, provided for users of...

Security Bulletin: XML File Disclosure Vulnerability in IBM DB2 GET_WRAP_CFG_C and GET_WRAP_CFG_C2 (CVE-2012-2196).

Abstract Vulnerability in IBM DB2 could allow an authenticated user, without proper authorization, to read XML files. Content VULNERABILITY DETAILS CVE ID: CVE-2012-2196 DESCRIPTION: The IBM DB2 products listed below contain a security vulnerability that could allow an authenticated user, without...