IBM DB2 / DB2 Connect Tivoli监视代理DT_RPATH特权提升漏洞

Bugtraq ID: 51181 CVE ID：CVE-2011-4061 IBM DB2 Universal Database Server是一款大型的商业关系数据库系统 IBM DB2/IBM DB2 Connect存在安全漏洞，允许恶意本地用户提升特权 Tivoli监视代理ITMA绑定的SUID "tmaitm6/lx8266/bin/kbbacf1"可执行文件不安全使用DTRPATH来装载libkbb.so库，本地攻击者可以利用此漏洞诱使目标用户在特制库所在目录运行应用程序，可装载任意库提升权限 0 DB2 Connect 9.x IBM DB2 9.x 厂商解决方案...

IBM DB2 9.7 < Fix Pack 5 Multiple Denial of Service Vulnerabilities

According to its version, the installation of IBM DB2 9.7 running on the remote host is prior to Fix Pack 5. It is, therefore, affected by multiple denial of service vulnerabilities : - On Unix and Unix-like systems with both the Self Tuning Memory Manager STMM feature enabled and the...

IBM DB2 9.7 < 9.7 Fix Pack 5 Local DoS

Binary data 6099.prm...

CVE-2011-4435

The web-server component in the Consolidation and Analysis Engine CAE Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not prevent directory browsing, which allows remote attackers to obtain sensitive information via HTTP requests...

Directory traversal

The web-server component in the Consolidation and Analysis Engine CAE Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not prevent directory browsing, which allows remote attackers to obtain sensitive information via HTTP requests...

CVE-2011-4435

The web-server component in the Consolidation and Analysis Engine CAE Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not prevent directory browsing, which allows remote attackers to obtain sensitive information via HTTP requests...

CVE-2011-4435

The web-server component in the Consolidation and Analysis Engine CAE Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not prevent directory browsing, which allows remote attackers to obtain sensitive information via HTTP requests...

CVE-2011-4435

CVE-2011-4435 affects the web-server component of the Consolidation and Analysis Engine (CAE) Server in IBM DB2 Tools 2.3.0 for z/OS. The issue is that directory browsing is not prevented, enabling remote attackers to obtain sensitive information via HTTP requests. CVSSv2 metrics indicate a Netwo...

CVE-2011-1373

Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager STMM feature and the AUTOMATIC DATABASEMEMORY setting are configured, allows local users to cause a denial of service daemon crash via unknown vectors...

CVE-2011-1373

Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager STMM feature and the AUTOMATIC DATABASEMEMORY setting are configured, allows local users to cause a denial of service daemon crash via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager STMM feature and the AUTOMATIC DATABASEMEMORY setting are configured, allows local users to cause a denial of service daemon crash via unknown vectors...

CVE-2011-1373

Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager STMM feature and the AUTOMATIC DATABASEMEMORY setting are configured, allows local users to cause a denial of service daemon crash via unknown vectors...

CVE-2011-1373

CVE-2011-1373 affects IBM DB2 9.7 on UNIX prior to FP5 when STMM is enabled and DATABASE_MEMORY is set to AUTOMATIC. Local users can trigger a denial of service (daemon crash) via unknown vectors. The issue is documented across multiple sources, and remediation is available in the DB2 9.7 FP5 fix...

IBM DB2 'DT_RPATH' Insecure Library Loading Code Execution Vulnerabilities

The host is running IBM DB2 and is prone to insecure library loading vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmdb2dtrpathinsecurelibloadvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ IBM DB2 'DTRPATH' Insecure Library Loading Code Execution Vulnerabilities Authors: Antu Sanadi...

IBM Db2 'DT_RPATH' Insecure Library Loading Code Execution Vulnerabilities

IBM Db2 is prone to insecure library loading vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2";...

Mandriva Update for krb5 MDVSA-2011:160 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVSA-2011:160 krb5 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Linux Security Advisory : krb5 (MDVSA-2011:160)

Multiple vulnerabilities has been found and corrected in krb5 : The krb5ldaplockoutaudit function in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8 through 1.8.4 and 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service assertion...

Null pointer dereference

The lookuplockoutpolicy function in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 aka Berkeley DB or LDAP back end is used, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via vectors...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation. The krb5db2lockoutaudit function in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8 through 1.8.4, when the db2 aka Berkeley DB back end is used, allows remote attackers to cause a denial of...

USN-1233-1: Kerberos Vulnerabilities

Nalin Dahyabhai, Andrej Ota and Kyle Moffett discovered a NULL pointer dereference in the KDC LDAP backend. An unauthenticated remote attacker could use this to cause a denial of service. This issue affected Ubuntu 11.10. CVE-2011-1527 Mark Deneen discovered that an assert could be triggered in t...