Security Bulletin: DB2 Denial of Service Vulnerability in DRDA (CVE-2012-0710)

Abstract Vulnerability in IBM DB2 server products could allow a specially-crafted DRDA request to crash the server. Content VULNERABILITY DETAILS CVE ID: CVE-2012-0710 DESCRIPTION: A vulnerability in the IBM DB2 products listed below could allow an unauthenticated, remote attacker to sent a...

Security Bulletin: DB2 Denial of Service Vulnerability in DRDA (CVE-2012-2180)

Abstract Vulnerability in IBM DB2 server products could allow a specially-crafted DRDA request to cause disruption to the server. Content VULNERABILITY DETAILS CVE ID: CVE-2012-2180 DESCRIPTION: A vulnerability in the IBM DB2 products listed below could allow an unauthenticated, remote attacker t...

Apache Derby Detection Consolidation

Consolidation of Apache Derby detections. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; ifdescription...

Security Bulletin: IBM® DB2® LUW contains a denial of service vulnerability in which a malformated DRDA message may cause the DB2 server to terminate abnormally (CVE-2016-0211)

Summary IBM DB2 LUW contains a denial of service vulnerability. A remote, authenticated DB2 user could exploit this vulnerability by issuing a specially-crafted DRDA message and cause DB2 server to terminate abnormally. Vulnerability Details CVEID: CVE-2016-0211 DESCRIPTION: IBM DB2 LUW contains ...

Security Bulletin: A security vulnerability has been identified in IBM DB2 shipped with IBM Predictive Maintenance and Quality (CVE-2016-0215)

Summary IBM DB2 is shipped as a component of IBM Predictive Maintenance and Quality. Information about a security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details Please consult the Security Bulletin: Vulnerability in IBM DB2 LUW contains a denial o...

nje-pass-brute NSE Script

z/OS JES Network Job Entry NJE 'I record' password brute forcer. After successfully negotiating an OPEN connection request, NJE requires sending, what IBM calls, an 'I record'. This initialization record may sometimes require a password. This script, provided with a valid OHOST/RHOST for the NJE...

Unspecified Vulnerability in IBM IMS Enterprise Suite Data Provider for Microsoft .NET

IBM IMS Enterprise Suite Data Provider for Microsoft .NET is a solution from IBM USA that provides Microsoft .NET based applications to access and manipulate IMS data. The solution supports access to IMS data from .NET applications using standard SQL queries and handling of IMS connected links an...

CVE-2016-0211

IBM DB2 9.7 through FP11, 9.8, 10.1 through FP5, and 10.5 through FP7 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service daemon crash via a crafted DRDA message...

CVE-2016-0211

IBM DB2 9.7 through FP11, 9.8, 10.1 through FP5, and 10.5 through FP7 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service daemon crash via a crafted DRDA message...

Code injection

IBM DB2 9.7 through FP11, 9.8, 10.1 through FP5, and 10.5 through FP7 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service daemon crash via a crafted DRDA message...

CVE-2016-0211: Improper Input Validation

IBM DB2 9.7 through FP11, 9.8, 10.1 through FP5, and 10.5 through FP7 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service daemon crash via a crafted DRDA message...

PT-2016-4095

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.7 through 9.7 FP11 IBM DB2 version 9.8 IBM DB2 versions 10.1 through 10.1 FP5 IBM DB2 versions 10.5 through 10.5 FP7 Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon...

IBM DB2 9.8 < Fix Pack 5 Multiple Vulnerabilities

Binary data 9196.prm...

Wireshark 1.8.x < 1.8.3 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 1.8.3. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.3 advisory. - Buffer overflow in the dissecttlv function in epan/dissectors/packet-ldp.c in the LDP dissector in Wireshark 1.8...

Wireshark 1.6.x < 1.6.11 DRDA DoS

The installed version of Wireshark 1.6 is earlier than 1.6.11. It thus is affected by a denial of service vulnerability. A malformed packet can cause the 'DRDA' dissector to enter an infinite loop thereby consuming excessive CPU resources. C Tenable Network Security, Inc. include"compat.inc"; if...

Wireshark -- Multiple Vulnerabilities

Wireshark reports: The HSRP dissector could go into an infinite loop. The PPP dissector could abort. Martin Wilck discovered an infinite loop in the DRDA dissector. Laurent Butti discovered a buffer overflow in the LDP dissector...

IBM Db2 Chaining Functionality DRDA Module DoS Vulnerability

IBM Db2 is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2"; ifdescription...

FreeBSD : wireshark -- denial of service in DRDA dissector (5415f1b3-f33d-11e1-8bd8-0022156e8794)

RedHat security team reports : A denial of service flaw was found in the way Distributed Relational Database Architecture DRDA dissector of Wireshark, a network traffic analyzer, performed processing of certain DRDA packet capture files. A remote attacker could create a specially crafted capture...

DEBIAN-CVE-2012-3548

The dissectdrda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and 1.8.x through 1.8.2 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a small value for a certain length field in a capture file...

CVE-2012-3548

CVE-2012-3548 affects Wireshark 1.6.x (up to 1.6.10) and 1.8.x (up to 1.8.2). The vulnerability is in the DRDA dissector (epan/dissectors/packet-drda.c): a small length field in a capture file can cause a remote attacker to trigger an infinite loop and high CPU usage, leading to a denial of servi...