Multiple Buffer Overflow Vulnerabilities in Informix

NGSSoftware Insight Security Research Advisory Name: Multiple Buffer Overflow Vulnerabilities in Informix Systems Affected: All versions of Informix Severity: High Vendor URL: http://www.ibm.com/ Author: David Litchfield [email protected] Date of Public Advisory: 2nd August 2006 Advisory...

IBM DB2 Version Detection

Binary data 3698.prm...

IBM DB2 Discovery Service Detection

The remote host is running an IBM DB2 discovery service. DB2 is an enterprise database solution, and the discovery service is used by DB2 to locate databases across a network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid22017; scriptversion"1.16";...

IBM DB2 Administration Server Detection

The remote host is running an IBM DB2 Administration Server. DB2 is an enterprise relational database management system, and the Administration Server is used by DB2 to administer databases across a network. C Tenable, Inc. include"compat.inc"; if description scriptid22016; scriptversion"1.31";...

CVE-2006-3068

IBM DB2 Universal Database UDB before 8.2 FixPak 12 allows remote attackers to cause a denial of service application crash by sending "incorrect information ... regarding the package name/creator," which leads to a "memory overwrite."...

CVE-2006-3066

Buffer overflow in the TCP/IP listener in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allows remote attackers to cause a denial of service application crash via a long MGRLVLLS message inside of an EXCSAT message when establishing a connection...

CVE-2006-3067

Multiple unspecified vulnerabilities in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allow remote attackers to cause a denial of service application crash via a 1 "long column list" in the a REPLACE INTO and b INSERT INTO portions of the LOAD command or a 2 large number of values in an IN...

CVE-2006-3066

Buffer overflow in the TCP/IP listener in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allows remote attackers to cause a denial of service application crash via a long MGRLVLLS message inside of an EXCSAT message when establishing a connection...

CVE-2006-3067

CVE-2006-3067 affects IBM DB2 Universal Database (UDB) prior to 8.1 FixPak 12. The vulnerability arises in the LOAD command: an overly long column list in REPLACE INTO or INSERT INTO, or a very large IN clause, potentially tied to a buffer overflow, enabling remote denial-of-service (application ...

CVE-2006-3068

IBM DB2 Universal Database (UDB) before 8.2 FixPak 12 is affected by a remote denial of service due to a memory overwrite caused by sending "incorrect information" about the package name/creator. This CVE involves a flaw in how the database handles certain crafted input, leading to an application...

CVE-2006-3067

Multiple unspecified vulnerabilities in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allow remote attackers to cause a denial of service application crash via a 1 "long column list" in the a REPLACE INTO and b INSERT INTO portions of the LOAD command or a 2 large number of values in an IN...

CVE-2006-3068

IBM DB2 Universal Database UDB before 8.2 FixPak 12 allows remote attackers to cause a denial of service application crash by sending "incorrect information ... regarding the package name/creator," which leads to a "memory overwrite."...

CVE-2006-3066

CVE-2006-3066 affects IBM DB2 Universal Database (UDB) prior to 8.1 FixPak 12. The issue is a buffer overflow in the TCP/IP listener triggered by a long MGRLVLLS message inside an EXCSAT during connection establishment, which may allow a remote attacker to cause an application crash (DoS). This v...

IBM DB2 Universal Database multiple denial of service conditions

No description provided...

[SA20579] DB2 Universal Database Multiple Denial of Service Vulnerabilities

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

IBM DB2 < 8.12.0 Multiple DoS (deprecated)

Binary data 3652.prm...

Design/Logic Flaw

AngelineCMS 0.6.5 and earlier allow remote attackers to obtain sensitive information via a direct request for 1 adodb-access.inc.php, 2 adodb-ado.inc.php, 3 adodb-adoaccess.inc, 4 adodb-adomssql.inc.php, 5 adodb-borlandibase, 6 adodb-csv.inc.php, 7 adodb-db2.inc.php, 8 adodb-fbsql.inc.php, 9...

[Full-disclosure] CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability CA Vulnerability ID: 34013 CA Advisory Date: 2006-05-02 Discovered By: IBM Global Services Impact: Local attacker can gain escalated privileges. Summary: A potential...

CVE-2005-4738

IBM DB2 Universal Database UDB 810 before ESE AIX 5765F4100 does not ensure that a user has execute privileges before permitting object creation based on routines, which allows remote authenticated users to gain privileges...

CVE-2005-4738

IBM DB2 Universal Database (UDB) 8.1.0 prior to ESE AIX 5765F4100 is vulnerable to privilege escalation because it does not verify execute privileges for objects created from routines, allowing remote authenticated users to gain privileges. Affected product/version: IBM DB2 UDB 8.1.0 (ESE AIX 576...