IBM DB2 9.1 < 9.1 Fix Pack 6 Multiple Vulnerabilities

Binary data 4721.prm...

CVE-2008-4692

The Native Managed Provider for .NET component in IBM DB2 8 before FP17, 9.1 before FP6, and 9.5 before FP2, when a definer cannot maintain objects, preserves views and triggers without marking them inoperative or dropping them, which has unknown impact and attack vectors...

CVE-2008-4691

Unspecified vulnerability in the SQLNLSUNPADDEDCHARLEN function in the New Compiler aka Starburst derived compiler component in the server in IBM DB2 9.1 before FP6 allows attackers to cause a denial of service segmentation violation and trap via unknown vectors...

CVE-2008-4693

The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES."...

Design/Logic Flaw

The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES."...

Code injection

The Native Managed Provider for .NET component in IBM DB2 8 before FP17, 9.1 before FP6, and 9.5 before FP2, when a definer cannot maintain objects, preserves views and triggers without marking them inoperative or dropping them, which has unknown impact and attack vectors...

Code injection

Unspecified vulnerability in the SQLNLSUNPADDEDCHARLEN function in the New Compiler aka Starburst derived compiler component in the server in IBM DB2 9.1 before FP6 allows attackers to cause a denial of service segmentation violation and trap via unknown vectors...

CVE-2008-4691

CVE-2008-4691 affects IBM DB2 9.1 before FP6. An unspecified issue in the SQLNLS_UNPADDEDCHARLEN function of the New Compiler (Starburst-derived compiler) can cause a segmentation fault, resulting in a denial of service. Remediation is provided by IBM Fix Pack 6 for DB2 9.1; APARs and fix listing...

CVE-2008-4692

CVE-2008-4692 affects IBM DB2’s Native Managed Provider for .NET. When a definer cannot maintain objects, it preserves views and triggers without marking them inoperative or dropping them, giving an unknown impact. Remediation is provided via fixes: IBM DB2 9.1 FP6 and DB2 9.5 FP2 (and related pa...

CVE-2008-4693

The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES."...

CVE-2008-4692

The Native Managed Provider for .NET component in IBM DB2 8 before FP17, 9.1 before FP6, and 9.5 before FP2, when a definer cannot maintain objects, preserves views and triggers without marking them inoperative or dropping them, which has unknown impact and attack vectors...

CVE-2008-4691

Unspecified vulnerability in the SQLNLSUNPADDEDCHARLEN function in the New Compiler aka Starburst derived compiler component in the server in IBM DB2 9.1 before FP6 allows attackers to cause a denial of service segmentation violation and trap via unknown vectors...

CVE-2008-4693

The CVE-2008-4693 entry concerns IBM DB2: the SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, allowing an attacker to read password-related connection string keyword values. According to the provided data, the issue affec...

IBM DB2 9.1 < Fix Pack 6 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.1 running on the remote host is affected by one or more of the following issues : - An unspecified error in 'SQLNLSUNPADDEDCHARLEN' may lead to a segmentation fault in the DB2 server. LI73364 - DB2 does not mark inoperative or drop views and...

[SECURITY] Fedora 8 Update: rubygem-rails-2.1.1-2.fc8

Rails is a framework for building web-application using CGI, FCGI, modruby, or WEBrick on top of either MySQL, PostgreSQL, SQLite, DB2, SQL Server, or Oracle with eRuby- or Builder-based templates...

[SECURITY] Fedora 9 Update: rubygem-rails-2.1.1-2.fc9

Rails is a framework for building web-application using CGI, FCGI, modruby, or WEBrick on top of either MySQL, PostgreSQL, SQLite, DB2, SQL Server, or Oracle with eRuby- or Builder-based templates...

IBM Db2 Detection (SMB)

This script performs a SMB based detection of IBM Db2 Server. Copyright C 2008 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

IBM Db2 Detection (Linux/Unix SSH Login)

SSH login-based detection of IBM Db2 Server. Copyright C 2008 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

IBM Db2 Universal Database Multiple Vulnerabilities (Sep 2008) - Linux

IBM Db2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Db2 Universal Database Multiple Vulnerabilities (Sep 2008) - Windows

IBM Db2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...