5503 matches found
CVE-2004-0795
CVE-2004-0795 affects IBM DB2 Universal Database 8.1: the DB2RCMD remote command server (DB2REMOTECMD named pipe) can cause the db2rcmdc.exe process to run as the db2admin administrator, enabling a locally authenticated user to gain privileges. Public references describe an exploit path via the D...
CVE-2002-1583
CVE-2002-1583 describes a local buffer overflow in IBM DB2 Universal Database (DB2 UDB) versions 6.0 and 7.0, triggered by a long username read from a file descriptor argument within sqllib/security/db2ckpw. The underlying issue is a vulnerability in handling the username input that can overflow ...
CVE-2003-1051
CVE-2003-1051 affects IBM DB2 Universal Database 8.1. It describes multiple format-string vulnerabilities that could allow local users to execute arbitrary code via certain command-line arguments to db2start, db2stop, or db2govd. Root cause: format string handling issues in the involved binaries....
CVE-2003-1049
CVE-2003-1049 affects IBM DB2 Universal Database 7 before FixPak 12, where DMS directories are created with insecure 777 permissions, allowing local users to modify or delete certain DB2 files. Root cause: insecure directory permissions on DMS components. Impact as per CVSS: partial confidentiali...
CVE-2003-1049
IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions 777, which allows local users to modify or delete certain DB2 files...
CVE-2004-0795
DB2 8.1 remote command server DB2RCMD.EXE executes the db2rcmdc.exe program as the db2admin administrator, which allows local users to gain privileges via the DB2REMOTECMD named pipe...
CVE-2003-1050
Consolidated details from connected documents: IBM DB2 Universal Database 8.1 contains multiple buffer overflows that allow local users to execute arbitrary code via long command line arguments to (1) db2start, (2) db2stop, or (3) db2govd. The vulnerability is local-privilege escalation with pote...
CVE-2003-1050
Multiple buffer overflows in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via long command line arguments to 1 db2start, 2 db2stop, or 3 db2govd...
CVE-2002-1583
Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file descriptor argument...
CVE-2003-1052
IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs...
CVE-2003-1052
CVE-2003-1052 affects IBM DB2 7.1 and 8.1. The vulnerability allows the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs. The provided documents do not specify the root cause details beyond this behavior, nor do they provide explicit exploit...
CVE-2003-1051
Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to 1 db2start, 2 db2stop, or 3 db2govd...
CVE-2003-1049: Undefined Security Weakness
IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions 777, which allows local users to modify or delete certain DB2 files...
CVE-2003-1052: Undefined Security Weakness
IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs...
CVE-2004-0795: Undefined Security Weakness
DB2 8.1 remote command server DB2RCMD.EXE executes the db2rcmdc.exe program as the db2admin administrator, which allows local users to gain privileges via the DB2REMOTECMD named pipe...
CVE-2002-1583: Undefined Security Weakness
Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file descriptor argument...
CVE-2003-1051: Undefined Security Weakness
Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to 1 db2start, 2 db2stop, or 3 db2govd...
CVE-2003-1050: Undefined Security Weakness
Multiple buffer overflows in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via long command line arguments to 1 db2start, 2 db2stop, or 3 db2govd...
