CVE-2005-4864

Stack-based buffer overflow in libdb2.so in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long DB2LPORT environment variable...

CVE-2005-4871

Certain XML functions in IBM DB2 8.1 run with the privileges of DB2 instead of the logged-in user, which allows remote attackers to create or overwrite files via 1 XMLFileFromVarchar or 2 XMLFileFromClob, or read files via 3 XMLVarcharFromFile or 4 XMLClobFromFile...

CVE-2005-4869

The 1 tochar and 2 todate function in IBM DB2 8.1 allows local users to cause a denial of service application crash via an empty string in the second parameter, which causes a null pointer dereference...

CVE-2005-4870

Stack-based buffer overflows in the 1 xmlvarcharfromfile, 2 xmlclobfromfile, 3 xmlfilefromvarchar, and 4 xmlfilefromclob function calls in IBM DB2 8.1 allow remote attackers to execute arbitrary code via a 94-byte second argument, which causes the return address to be overwritten with a pointer t...

CVE-2005-4868

The CVE-2005-4868 entry affects IBM DB2 8.1. Shared memory sections and events have default read/write permissions for the Everyone group, enabling local users to gain unauthorized access and potentially view sensitive data (e.g., cleartext passwords) and cause a denial of service. Exploitation i...

CVE-2005-4870

CVE-2005-4870 describes stack-based buffer overflows in IBM DB2 8.1 affecting four XML-related functions (xmlvarcharfromfile, xmlclobfromfile, xmlfilefromvarchar, xmlfilefromclob). The overflow is triggered by a 94-byte second argument, leading to overwriting the return address to a pointer withi...

CVE-2005-4867

Stack-based buffer overflow in the SATENCRYPT function in IBM DB2 8.1, when Satellite Administration SATADMIN is enabled, allows remote attackers to execute arbitrary code via a long parameter...

CVE-2005-4863

Stack-based buffer overflow in db2fmp in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long parameter...

CVE-2005-4865

CVE-2005-4865 describes a stack-based buffer overflow in the IBM DB2 client/server call path that can be triggered by a long libname, affecting IBM DB2 Universal Database 7.x and 8.x (specifically 8.1 in some records). The vulnerability allows remote code execution and is rated high by NVD, with ...

CVE-2005-4866

CVE-2005-4866 describes a stack-based buffer overflow in IBM DB2 8.1’s JDBC Applet Server. The vulnerability can be triggered remotely by an attacker who connects, sends a very long username, disconnects, then reconnects and sends a shorter username with an unexpected db2java.zip version, which r...

CVE-2005-4867

IBM DB2 8.1 exposes a stack-based buffer overflow in the SATENCRYPT function when Satellite Administration (SATADMIN) is enabled. An attacker can trigger code execution remotely by sending a crafted long parameter. The issue is tied to a buffer overflow in SATENCRYPT; no remediation or patch deta...

CVE-2005-4864

CVE-2005-4864 describes a stack-based buffer overflow in IBM DB2 UDB 7.x and 8.1, triggered by a long DB2LPORT environment variable in the libdb2.so library. This vulnerability allows local users to execute arbitrary code with the privileges of the running DB2 process. Affected product/version: I...

CVE-2005-4871

IBM DB2 8.1 contains a vulnerability where certain XML functions run with the DB2 process privileges instead of the logged-in user, enabling a remote attacker to create or overwrite files via XMLFileFromVarchar or XMLFileFromClob, or to read files via XMLVarcharFromFile or XMLClobFromFile. The NV...

CVE-2005-4868

Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, which allows local users to gain unauthorized access, gain sensitive information, such as cleartext passwords, and cause a denial of service...

CVE-2005-4863

CVE-2005-4863 describes a stack-based buffer overflow in IBM DB2’s db2fmp component, enabling local users to execute arbitrary code via a long parameter. Affected products include IBM DB2 Universal Database 7.x and 8.x (DB2 8.1). Root cause is a buffer overflow in db2fmp; impact is arbitrary code...

CVE-2005-4869

The CVE-2005-4869 entry affects IBM DB2 8.1, where the (1) to_char and (2) to_date functions can be exploited by an empty string in the second parameter to trigger a local denial of service (application crash) via a null pointer dereference. The vulnerability is triggered locally, and the cited d...

CVE-2007-5090

Unspecified vulnerability in IBM Rational ClearQuest CQ, when a Microsoft SQL Server or an IBM DB2 database is used, allows attackers to corrupt data via unspecified vectors...

Code injection

Unspecified vulnerability in IBM Rational ClearQuest CQ, when a Microsoft SQL Server or an IBM DB2 database is used, allows attackers to corrupt data via unspecified vectors...

CVE-2007-5090

Unspecified vulnerability in IBM Rational ClearQuest CQ, when a Microsoft SQL Server or an IBM DB2 database is used, allows attackers to corrupt data via unspecified vectors...

CVE-2007-5090

CVE-2007-5090 : IBM Rational ClearQuest contains an unspecified vulnerability that, when using Microsoft SQL Server or IBM DB2, could allow a local attacker to manipulate data. The connected IBM/DB2 bulletin confirms exposure in CQ and notes a low (1.2) CVSS base score with local access; no mitig...