Authentication Capture: DRDA (DB2, Informix, Derby)

This module provides a fake DRDA DB2, Informix, Derby server that is designed to capture authentication credentials. -- coding: binary -- This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...

IBM DB2 9.7 < Fix Pack 6 Multiple Vulnerabilities

According to its version, the installation of DB2 9.7 running on the remote host is prior to Fix Pack 6. It is, therefore, affected by multiple vulnerabilities : - A local user can exploit a vulnerability in the bundled IBM Tivoli Monitoring Agent ITMA to escalate their privileges. CVE-2011-4061 ...

IBM DB2 9.8 < Fix Pack 5 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.8 running on the remote host is prior to Fix Pack 5. It is, therefore, affected by multiple vulnerabilities : - An authorized user with 'CONNECT' privileges from 'PUBLIC' can cause a denial of service via unspecified methods related to DB2's...

IBM DB2 9.1 < Fix Pack 11 Multiple DoS

According to its version, the installation of IBM DB2 9.1 running on the remote host is prior to Fix Pack 11. It is, therefore, affected by multiple denial of service vulnerabilities : - The version of Java that is bundled with the application can enter an infinite loop when handling certain...

CVE-2012-2180

The chaining functionality in the Distributed Relational Database Architecture DRDA module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service NULL pointer dereference, and resource consumption or daemon crash via a crafted request...

CVE-2012-2180

The chaining functionality in the Distributed Relational Database Architecture DRDA module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service NULL pointer dereference, and resource consumption or daemon crash via a crafted request...

Null pointer dereference

The chaining functionality in the Distributed Relational Database Architecture DRDA module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service NULL pointer dereference, and resource consumption or daemon crash via a crafted request...

CVE-2012-2180

The chaining functionality in the Distributed Relational Database Architecture DRDA module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service NULL pointer dereference, and resource consumption or daemon crash via a crafted request...

CVE-2012-2180

CVE-2012-2180 concerns IBM DB2 DRDA chaining, where a crafted DRDA request can trigger a denial of service. The vulnerability exists in the DRDA module handling DRDA chaining on DB2 9.7 (GA through FP5) and 9.8 (GA through FP4/FP5 as per bulletin) and can cause a NULL pointer dereference, leading...

IBM DB2 9.x 多个安全漏洞

IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。 IBM DB2 9.7 Fix Pack 6 FP6之前版本在实现上存在多个安全漏洞，可被恶意本地用户利用操作某些数据、获取提升权限、绕过某些安全限制、造成拒绝服务。 1） 附带版本的IBM Tivoli Monitoring Agent ITMA中存在错误，可被本地用户利用提升权限。 2） DB2 Administration Server DAS中的错误可被已验证用户利用提升其权限。 3）...

Fedora Update for gallery2 FEDORA-2012-5814

Check for the Version of gallery2 OpenVAS Vulnerability Test Fedora Update for gallery2 FEDORA-2012-5814 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 15 Update: gallery2-2.3.2-1.fc15

The base Gallery 2 installation - the equivalent of upstream's -minimal package. This package requires a database to be operational. Acceptable database backends include MySQL v 3.x, MySQL v 4.x, PostgreSQL v 7.x, PostgreSQL v 8.x, Oracle 9i, Oracle 10g, DB2, and MS SQL Server. All given package...

[SECURITY] Fedora 16 Update: gallery2-2.3.2-1.fc16

The base Gallery 2 installation - the equivalent of upstream's -minimal package. This package requires a database to be operational. Acceptable database backends include MySQL v 3.x, MySQL v 4.x, PostgreSQL v 7.x, PostgreSQL v 8.x, Oracle 9i, Oracle 10g, DB2, and MS SQL Server. All given package...

[SECURITY] Fedora 17 Update: gallery2-2.3.2-2.fc17

The base Gallery 2 installation - the equivalent of upstream's -minimal package. This package requires a database to be operational. Acceptable database backends include MySQL v 3.x, MySQL v 4.x, PostgreSQL v 7.x, PostgreSQL v 8.x, Oracle 9i, Oracle 10g, DB2, and MS SQL Server. All given package...

IBM DB2 Tivoli Monitoring Agent Privilege Escalation Vulnerability (Linux)

This host is installed with IBM DB2 and is prone to privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: gbibmdb2itmaprivescalationvulnlin.nasl 6022 2017-04-25 12:51:04Z teissa $ IBM DB2 Tivoli Monitoring Agent Privilege Escalation Vulnerability Linux Authors: Madhuri D Copyright:...

IBM Db2 Tivoli Monitoring Agent Privilege Escalation Vulnerability - Linux

IBM DB2 is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2"; ifdescription...

IBM DB2 'nodes.reg' Permission Weakness Vulnerability

The host is running IBM DB2 and is prone to permission weakness vulnerability. OpenVAS Vulnerability Test $Id: gbibmdb2nodespermweakvuln.nasl 5963 2017-04-18 09:02:14Z teissa $ IBM DB2 'nodes.reg' Permission Weakness Vulnerability Authors: Madhuri D Copyright: Copyright c 2012 Greenbone Networks...

IBM DB2 Distributed Relational Database Architecture Request DoS Vulnerability

The host is running IBM DB2 and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbibmdb2drdareqdosvuln.nasl 6018 2017-04-24 09:02:24Z teissa $ IBM DB2 Distributed Relational Database Architecture Request DoS Vulnerability Authors: Madhuri D Copyright: Copyright c 2012...

IBM DB2 XML Feature DoS and CREATE VARIABLE Security Bypass Vulnerabilities

The host is running IBM DB2 and is prone to denial of service and security bypass vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmdb2xmldosncreatevarsecbypassvuln.nasl 5999 2017-04-21 09:02:32Z teissa $ IBM DB2 XML Feature DoS and CREATE VARIABLE Security Bypass Vulnerabilities Authors:...

IBM Db2 'nodes.reg' Permission Weakness Vulnerability

IBM Db2 is prone to a permission weakness vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2"; ifdescription...