CVE-2003-1050

Multiple buffer overflows in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via long command line arguments to 1 db2start, 2 db2stop, or 3 db2govd...

CVE-2004-0795: Undefined Security Weakness

DB2 8.1 remote command server DB2RCMD.EXE executes the db2rcmdc.exe program as the db2admin administrator, which allows local users to gain privileges via the DB2REMOTECMD named pipe...

CVE-2003-1049: Undefined Security Weakness

IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions 777, which allows local users to modify or delete certain DB2 files...

CVE-2003-1052: Undefined Security Weakness

IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs...

CVE-2002-1583: Undefined Security Weakness

Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file descriptor argument...

CVE-2003-1050: Undefined Security Weakness

Multiple buffer overflows in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via long command line arguments to 1 db2start, 2 db2stop, or 3 db2govd...

CVE-2003-1051: Undefined Security Weakness

Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to 1 db2start, 2 db2stop, or 3 db2govd...

IBM DB2 9.1 < 9.1 Fix Pack 7 / 9.5 < 9.5 Fix Pack 4 Multiple Vulnerabilities

Binary data 5043.prm...

IBM DB2 Client Detection

Binary data 5119.prm...

IBM DB2 9.1 < 9.1 Fix Pack 7 Information Disclosure

Binary data 5006.prm...

IBM DB2 9.x < 9 Fix Pack 5 Multiple Vulnerabilities

Binary data 4536.prm...

DB2 RPC privilege escalation

It's possible to attach to a process with administrator privileges...

[VulnWatch] IBM DB2 Remote Command Execution Privilege Upgrade &#40;#NISR09032004&#41;

NGSSoftware Insight Security Research Advisory Name: IBM DB2 Remote Command Execution Privilege Upgrade Systems Affected: DB2 8.1 Enterprise Edition on Windows Severity: High/Low depending on environment Vendor URL: http://www.ibm.com/ Author: David Litchfield [email protected] Date Vendor...

IBM DB2 db2rcmd.exe Command Execution Vulnerability

This module exploits a vulnerability in the Remote Command Server component in IBM's DB2 Universal Database 8.1. An authenticated attacker can send arbitrary commands to the DB2REMOTECMD named pipe which could lead to administrator privileges. Module Options msf use auxiliary/admin/db2/db2rcmd ms...

CVE-2003-0898

IBM DB2 7.2 before FixPak 10a, and earlier versions including 7.1, allows local users to overwrite arbitrary files and gain privileges via a symlink attack on 1 db2job and 2 db2job2...

CVE-2003-0836

Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 before Fixpak 10 and 10a, and 8.1 before Fixpak 2, allows attackers with "Connect" privileges to execute arbitrary code via a LOAD command...

CVE-2003-0837

Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 for Windows, before Fixpak 10a, allows attackers with "Connect" privileges to execute arbitrary code via the INVOKE command...

SRT2003-11-06-0710 - IBM DB2 Multiple local security issues

Secure Network Operations, Inc. http://www.secnetops.com/research Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...

IBM DB2 - db2govd Command Line Argument Local Overflow

IBM DB2 - db2govd Command Line Argument Local Overflow source: https://www.securityfocus.com/bid/8990/info IBM DB2 has been reported to be prone to multiple buffer overflow vulnerabilities that present themselves in binaries that are shipped with DB2. The vulnerabilities are likely caused due to ...

IBM DB2 - db2stop Format String Arbitrary Code Execution

IBM DB2 - db2stop Format String Arbitrary Code Execution source: https://www.securityfocus.com/bid/8989/info Multiple command-line parameter format string vulnerabilities have been discovered in various IBM DB2 binaries. Specifically, format-based functions are implemented erroneously within the...