CVE-2018-1630

IBM Informix Dynamic Server (IDS) Privilege Escalation (CVE-2018-1630) affects IDS v12.10 (Enterprise) where a local DBA can gain root via a symbolic link vulnerability in onmode. The IBM advisory (IDS security bulletin) confirms the root cause as a symbolic link issue and lists a remediation: up...

CVE-2018-1632: Improper Link Resolution Before File Access

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in .infxdirs. IBM X-Force ID: 144432...

The vulnerability of the DataPump component of the Oracle Database Server RDBMS system allows a hacker to gain full control over the system.

The vulnerability of the RDBMS DataPump component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, who has administrative privileges as a database administrator, to gain full control over the...

Man-in-the-middle Hijacking Vulnerability in Damon Database Management System

Damon database management system is a high-performance database management system with completely independent intellectual property rights launched by Damon, referred to as DM. There is a man-in-the-middle hijacking vulnerability in Damon Database Management System, which can be exploited by an...

Oracle Database Backup Fails With Event ID 44

Challenge Veeam Backup & Replication or Veeam Agent for Microsoft Windows jobs with Application-Aware Processing fail to process a Windows guest with Oracle database installed. The following symptoms are observed. The job fails with this or a similar error: Creating VSS snapshot Error: Failed to...

Damon database suffers from a power lifting vulnerability (CNVD-2018-03642)

DM7 is a new-generation database product designed by Damon on the basis of summarizing the R&D and application experience of DM series products, absorbing the advantages of mainstream database products and adopting JAVA-like virtual machine technology. DM7 database has a privilege loophole,...

Damon Database Vulnerability for Overstepping Authority and Tampering with Data

DM7 is a new-generation database product designed by Damon on the basis of summarizing the R&D and application experience of DM series products, absorbing the advantages of mainstream database products, and adopting JAVA-like virtual machine technology. DM7 database has the vulnerability of...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-02400)

Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on a variety of management software collection, is a seamless integration of a management suite. An...

Vulnerability in contrib module (CVE-2017-12172)

Start scripts permit database administrator to modify root-owned files...

Information disclosure

IBM Spectrum Protect 7.1 and 8.1 formerly Tivoli Storage Manager Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of service. IBM X-Force I...

PT-2017-12976

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect versions 7.1 through 8.1 Description The issue concerns the use of weak encryption for passwords in IBM Spectrum Protect Server, which could allow a database administrator to decrypt client or administrator passwords. This...

CVE-2017-1339: Use of a Broken or Risky Cryptographic Algorithm

IBM Spectrum Protect 7.1 and 8.1 formerly Tivoli Storage Manager Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of service. IBM X-Force I...

Damon Database Server Override Access Vulnerability

Damon Database Management System is a database management system introduced by Damon, abbreviated as DM. Damon database server has an override access vulnerability that can be exploited by an attacker to illegally obtain the DBA role and then control the entire database...

CVE-2017-1508

IBM Informix Dynamic Server 12.1 could allow a local user logged in with database administrator user to gain root privileges. IBM X-Force ID: 129620...

Code injection

IBM Informix Dynamic Server 12.1 could allow a local user logged in with database administrator user to gain root privileges. IBM X-Force ID: 129620...

CVE-2017-1508

IBM Informix Dynamic Server 12.1 could allow a local user logged in with database administrator user to gain root privileges. IBM X-Force ID: 129620...

PT-2017-13860

Name of the Vulnerable Software and Affected Versions IBM Informix Dynamic Server version 12.1 Description A local user logged in with database administrator privileges could potentially gain root privileges. Recommendations For IBM Informix Dynamic Server version 12.1, consider restricting...

CVE-2017-1508: Undefined Security Weakness

IBM Informix Dynamic Server 12.1 could allow a local user logged in with database administrator user to gain root privileges. IBM X-Force ID: 129620...

How to check Deadlocks in SQL DB and Delete historical data

When you see deadlocks, run the following query to see the deadlocks. Then, a database administrator or Microsoft SQL team can confirm the information...

Damon Database Management System DBA Account Remote Buffer Overflow Vulnerability

Damon Database Management System is a database management system introduced by Damon, abbreviated as DM. The latest version of Damon Database Management System, version 7.1.5.145, suffers from a buffer overflow vulnerability, where an attacker logging in with DBA privileges can cause the service ...