CVE-2008-4693

The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES."...

CVE-2008-4691

CVE-2008-4691 affects IBM DB2 9.1 before FP6. An unspecified issue in the SQLNLS_UNPADDEDCHARLEN function of the New Compiler (Starburst-derived compiler) can cause a segmentation fault, resulting in a denial of service. Remediation is provided by IBM Fix Pack 6 for DB2 9.1; APARs and fix listing...

CVE-2008-4691

Unspecified vulnerability in the SQLNLSUNPADDEDCHARLEN function in the New Compiler aka Starburst derived compiler component in the server in IBM DB2 9.1 before FP6 allows attackers to cause a denial of service segmentation violation and trap via unknown vectors...

CVE-2008-4693

The CVE-2008-4693 entry concerns IBM DB2: the SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, allowing an attacker to read password-related connection string keyword values. According to the provided data, the issue affec...

IBM DB2 9.1 < Fix Pack 6 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.1 running on the remote host is affected by one or more of the following issues : - An unspecified error in 'SQLNLSUNPADDEDCHARLEN' may lead to a segmentation fault in the DB2 server. LI73364 - DB2 does not mark inoperative or drop views and...

[SECURITY] Fedora 8 Update: rubygem-rails-2.1.1-2.fc8

Rails is a framework for building web-application using CGI, FCGI, modruby, or WEBrick on top of either MySQL, PostgreSQL, SQLite, DB2, SQL Server, or Oracle with eRuby- or Builder-based templates...

[SECURITY] Fedora 9 Update: rubygem-rails-2.1.1-2.fc9

Rails is a framework for building web-application using CGI, FCGI, modruby, or WEBrick on top of either MySQL, PostgreSQL, SQLite, DB2, SQL Server, or Oracle with eRuby- or Builder-based templates...

IBM DB2 Universal Database Multiple Vulnerabilities - Sept08 (Windows)

The host is running DB2 Database Server, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmdb28udbmultvulnwin900215.nasl 7174 2017-09-18 11:48:08Z asteins $ Description: IBM DB2 Universal Database Multiple Vulnerabilities - Sept08 Windows Authors: Veerendra GG...

IBM DB2 Universal Database Multiple Vulnerabilities - Sept08 (Linux)

The host is running DB2 Database Server, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmdb28udbmultvulnlin900216.nasl 7174 2017-09-18 11:48:08Z asteins $ Description: IBM DB2 Universal Database Multiple Vulnerabilities - Sept08 Linux Authors: Veerendra GG...

IBM Db2 Detection (SMB)

This script performs a SMB based detection of IBM Db2 Server. Copyright C 2008 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

IBM Db2 Universal Database Multiple Vulnerabilities (Sep 2008) - Linux

IBM Db2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Db2 Universal Database Multiple Vulnerabilities (Sep 2008) - Windows

IBM Db2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Db2 Detection (Linux/Unix SSH Login)

SSH login-based detection of IBM Db2 Server. Copyright C 2008 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

IBM DB2 Server Detection (Windows)

This script detects the version of IBM DB2 Server and saves the results in KB. OpenVAS Vulnerability Test $Id: secpodibmdb2detectwin900218.nasl 5372 2017-02-20 16:26:11Z cfi $ Description: IBM DB2 Server Detection Windows Authors: Veerendra GG Copyright: Copyright C 2008 SecPod,...

IBM DB2 Server Detection (Linux)

This script detects the version of IBM DB2 Server and saves the results in KB. OpenVAS Vulnerability Test $Id: secpodibmdb2detectlinux900217.nasl 7823 2017-11-20 08:54:04Z cfischer $ Description: IBM DB2 Server Detection Linux Authors: Veerendra GG Copyright: Copyright C 2008 SecPod,...

IBM DB2 multiple security vulnerabilities

XMLQUERY and XMLEXIST buffer overflow, CLR stored procedures privilege escalation and DoS...

Team SHATTER Security Advisory: IBM DB2 UDB - Buffer overrun in XMLQUERY and XMLEXISTS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Buffer overrun in XMLQUERY and XMLEXISTS September 15th 2008 Risk Level: High Affected versions: IBM DB2 Database Server v9.1 and 9.5 on Windows platform. Remote exploitable: Yes Authentication to Database Server is need...

DB2 < 8 FixPak 17 Multiple Vulnerabilities (deprecated)

Binary data 4680.prm...

IBM DB2 Universal Database Server 8.2 Fixpak 17之前存在多个漏洞

BUGTRAQ ID: 31058 CNCAN ID：CNCAN-2008091101 IBM DB2是一款大型的商业关系数据库系统， IBM DB2 Universal Database Server 8.2 Fixpak 17之前版本存在多个漏洞，攻击者可以利用漏洞进行如下攻击： -相关CONNECT / ATTACH处理存在远程拒绝服务攻击。 -DB2FMP过程存在未明安全问题。 -DB2JDS存在远程拒绝服务攻击。 -在Windows平台下以系统特权执行DB2FMP过程。 攻击者可以利用这些漏洞进行拒绝服务攻击，也可能造成其他未明攻击行为。 IBM DB2 Universal...

IBM DB2 8 < Fix Pack 17 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 8 running on the remote host is affected by multiple issues : - By sending malicious DB2 UDB v7 client CONNECT/DETACH requests it may be possible to crash the remote DB2 server. IZ08134 - Failure to switch the owner of the 'DB2FMP' process may...