CVE-2008-3856

The routine infrastructure component in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP1 on Unix and Linux does not change the ownership of the db2fmp process, which has unknown impact and attack vectors...

CVE-2008-3855

Unspecified vulnerability in the DB2 Administration Server DAS in the Core DAS function component in IBM DB2 9.1 before Fixpak 5 allows local users to gain privileges, aka a "FILE CREATION VULNERABILITY." NOTE: this may be the same as CVE-2007-5664...

Security feature bypass

The routine infrastructure component in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP1 on Unix and Linux does not change the ownership of the db2fmp process, which has unknown impact and attack vectors...

Design/Logic Flaw

Unspecified vulnerability in the DB2 Administration Server DAS in the Core DAS function component in IBM DB2 9.1 before Fixpak 5 allows local users to gain privileges, aka a "FILE CREATION VULNERABILITY." NOTE: this may be the same as CVE-2007-5664...

CVE-2008-3854

Multiple stack-based buffer overflows in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 1 allow remote attackers to cause a denial of service system outage via vectors related to 1 use of XQuery to issue statements; the 2 XMLQUERY, 3 XMLEXISTS, and 4 XMLTABLE statements; and the 5 sqlrlaka...

CVE-2008-3857

The Base Service Utilities component in IBM DB2 9.1 before Fixpak 5 retains a cleartext password in memory after the database connection that sent the password is fully established, which might allow local users to obtain sensitive information by reading a memory dump...

CVE-2008-3854

Multiple stack-based buffer overflows in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 1 allow remote attackers to cause a denial of service system outage via vectors related to 1 use of XQuery to issue statements; the 2 XMLQUERY, 3 XMLEXISTS, and 4 XMLTABLE statements; and the 5 sqlrlaka...

CVE-2008-3856

The routine infrastructure component in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP1 on Unix and Linux does not change the ownership of the db2fmp process, which has unknown impact and attack vectors...

CVE-2008-3853

Buffer overflow in the DAS server program in the Core DAS function component in IBM DB2 9.1 before FP4a and 9.5 before FP1 allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via unspecified vectors. NOTE: this might be related to CVE-2007-3676...

CVE-2008-3857

The Base Service Utilities component in IBM DB2 9.1 before Fixpak 5 retains a cleartext password in memory after the database connection that sent the password is fully established, which might allow local users to obtain sensitive information by reading a memory dump...

CVE-2008-3855

Unspecified vulnerability in the DB2 Administration Server DAS in the Core DAS function component in IBM DB2 9.1 before Fixpak 5 allows local users to gain privileges, aka a "FILE CREATION VULNERABILITY." NOTE: this may be the same as CVE-2007-5664...

CVE-2008-3852

Unspecified vulnerability in the CLR stored procedure deployment from IBM Database Add-Ins for Visual Studio in the Visual Studio Net component in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 2 allows remote authenticated users to execute arbitrary code via unknown vectors...

CVE-2008-3856

The CVE-2008-3856 entry concerns IBM DB2 on Unix/Linux where the db2fmp process does not change its ownership for DB2 versions 8 before FP17, 9.1 before FP5, and 9.5 before FP1. The underlying cause is stated as an ownership handling issue, with unknown impact and attack vectors; the provided doc...

CVE-2008-3858

The Downlevel DB2RA Support component in IBM DB2 9.1 before Fixpak 4a allows remote attackers to cause a denial of service instance crash via a crafted CONNECT data stream that simulates a V7 client connect request...

CVE-2008-3857

CVE-2008-3857 affects IBM DB2 9.1 Base Service Utilities; before Fixpak 5, it may retain the cleartext password in memory after the connection is established, potentially allowing local users to read sensitive data from a memory dump. Exploitation details are not provided in the available documen...

CVE-2008-3853

CVE-2008-3853 is a buffer overflow in the IBM DB2 DAS (Database Administration Server) component that affected multiple DB2 releases. Connected documents show the root cause as a memory corruption/overflow in the DAS handling of remote administration requests, allowing a remote attacker to crash ...

CVE-2008-3858

The CVE-2008-3858 entry concerns IBM DB2 9.1’s Downlevel DB2RA Support component. A crafted CONNECT data stream simulating a V7 client connect request can remotely cause an instance crash (DoS) prior to Fixpak 4a. The description does not provide details on affected subcomponents beyond this, nor...

CVE-2008-3854

CVE-2008-3854 affects IBM DB2 UDB (DB2 9.1 before Fix Pak 5 and 9.5 before Fixpak 1). The vulnerability consists of multiple stack-based buffer overflows in XML-related SQL semantics (XMLQUERY, XMLEXISTS, XMLTABLE) and the sqlrlaka function, allowing remote attackers to cause a denial of service ...

CVE-2008-3855

CVE-2008-3855 describes an unspecified local privilege-escalation vulnerability in IBM DB2 Universal Database 9.1’s DB2 Administration Server (DAS) Core DAS before Fixpak 5. It is a FILE CREATION vulnerability that can allow escalation by manipulating files used during initialization; some source...

CVE-2008-3852

CVE-2008-3852 affects IBM DB2 Server via the CLR stored procedure deployment feature of IBM Database Add-Ins for Visual Studio. A vulnerability in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 2 allows remote authenticated users to execute arbitrary code through unknown vectors in the CLR dep...