CVE-2007-1087

CVE-2007-1087 : IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 is vulnerable to a heap-based buffer overflow caused by improper termination of certain input strings. The flaw can be triggered by unspecified environment variables, enabling a local attacker to execute arbitrary code. Pr...

CVE-2007-1088

Stack-based buffer overflow in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allows local users to execute arbitrary code via a long string in unspecified environment variables...

CVE-2007-1089

CVE-2007-1089 affects IBM DB2 Universal Database (UDB) 9.1 GA through 9.1 FP1. The vulnerability arises when local users with table SELECT privileges can execute unauthorized UPDATE and DELETE SQL commands via unknown vectors. Affected component appears to be the database access/authorization pat...

CVE-2007-1089

IBM DB2 Universal Database UDB 9.1 GA through 9.1 FP1 allows local users with table SELECT privileges to perform unauthorized UPDATE and DELETE SQL commands via unknown vectors...

CVE-2007-1086

Unspecified binaries in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allow local users to create or modify arbitrary files via unspecified environment variables related to "unsafe file access."...

CVE-2007-1086

IBM DB2 vulnerable components: 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2. Local users can create or modify arbitrary files via unsafe file access controlled by unspecified environment variables. Root cause: environment-variable handling allows file writes. Impact is limited to local atta...

CVE-2007-1088

CVE-2007-1088 : The IBM DB2 stack-based buffer overflow affects DB2 8.x prior to 8.1 FixPak 15 and 9.1 prior to Fix Pack 2. A long string in unspecified environment variables can overflow a stack buffer, allowing a local user to potentially execute arbitrary code. Connected sources confirm the af...

iDefense Security Advisory 02.22.07: IBM DB2 Universal Database Multiple Privilege Escalation Vulnerabilities

IBM DB2 Universal Database Multiple Privilege Escalation Vulnerabilities iDefense Security Advisory 02.22.07 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 22, 2007 I. BACKGROUND IBM Corp.'s DB2 Universal Database product is a large database server product commonly used for higher end...

IBM DB2 database multiple security vulnerabilities

Multiple privilege escalations, file creation...

iDefense Security Advisory 02.22.07: IBM DB2 Universal Database DB2INSTANCE File Creation Vulnerability

IBM DB2 Universal Database DB2INSTANCE File Creation Vulnerability iDefense Security Advisory 02.22.07 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 22, 2007 I. BACKGROUND IBM Corp.'s DB2 Universal Database product is a large database server product commonly used for higher end...

IBM DB2 < 9 Fix Pack 2 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 running on the remote host allows unsafe access to several setuid-root binaries. A local attacker can exploit this to crash the affected database server or possibly even gain root-level access. In addition, the fenced userid may be able to...

IBM DB2 9.1 < 9.1 Fix Pack 2 Multiple Vulnerabilities

Binary data 3921.prm...

IBM DB2 database symboli links

Symboli links problem on temporary files creation...

Design/Logic Flaw

Certain setuid DB2 binaries in IBM DB2 before 9 Fix Pack 2 for Linux and Unix allow local users to overwrite arbitrary files via a symlink attack on the DB2DIAG.LOG temporary file...

CVE-2007-1027

Certain setuid DB2 binaries in IBM DB2 before 9 Fix Pack 2 for Linux and Unix allow local users to overwrite arbitrary files via a symlink attack on the DB2DIAG.LOG temporary file...

CVE-2007-1027

Certain setuid DB2 binaries in IBM DB2 before 9 Fix Pack 2 for Linux and Unix allow local users to overwrite arbitrary files via a symlink attack on the DB2DIAG.LOG temporary file...

CVE-2007-1027

CVE-2007-1027 affects IBM DB2 prior to 9 Fix Pack 2 for Linux/Unix. The vulnerability arises from a symlink attack on the temporary file DB2DIAG.LOG, allowing local users to overwrite arbitrary files via setuid DB2 binaries. The description in the provided documents confirms a local-privilege con...

Fedora Core 5 : mono-1.1.13.7-2.fc5.1 (2006-1012)

CVE-2006-5072 Mono insecure temporary file usage Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

IBM DB2 < 8.1 FixPak 12 EXCSAT Long MGRLVLLS Message Remote DoS

According to its version, the installation of IBM DB2 running on the remote host may crash when it attempts to process a specially crafted CONNECT or ATTACH request sent during the initial handshake process. An unauthenticated, remote attacker can exploit this issue to overflow a buffer and crash...

IBM DB2 < 8.1 Fix Pack 13 CONNECT Processing Unspecified DoS

According to its version, the installation of IBM DB2 running on the remote host may crash in certain scenarios, such as when a user connects using a specially crafted ACCSEC command during the handshake process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc...