CVE-2006-6638

CVE-2006-6638 affects IBM DB2 UDB 8.1 before FixPak 14. A remote attacker can trigger a denial of service by sending a crafted SQLJRA packet, leading to a NULL pointer dereference in the sqle_db2ra_as_recvrequest function in DB2ENGN.DLL. This is the same issue described in CVE-2006-4257 family bu...

IBM DB2 database server DoS

NULL pointer dereference on malformed SQLJRA packet...

IBM DB2 Remote DoS during CONNECT processing

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM DB2 Remote DoS during CONNECT processing AppSecInc Team SHATTER Security Advisory: http://www.appsecinc.com/resources/alerts/db2/2006-09-05.shtml Affected versions: All versions of IBM DB2 Database Server Risk level: Medium Credits: This...

IBM DB2 Universal Database 7.2 (db2licm) Local Exploit

No description provided by source. / Local Exploit for db2licm IBM db2 v 7.1 Linux/x86 vulnerability researched by Juan Manuel Pascual Escriba pask at uninet.edu / char sc= "\x31\xc0" / begin setuid 0 / "\x31\xdb" "\xb0\x17" "\xcd\x80" "\xeb\x1f" "\x5e" "\x89\x76\x08" "\x31\xc0" "\x88\x46\x07"...

IBM DB2多个拒绝服务漏洞

IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。 DB2的实现上存在多个拒绝服务漏洞，远程或本地攻击者可能导致服务器拒绝服务。 在创建到数据库的连接时客户端所使用的第一个消息是EXCSAT（消息代码0x1041）。这个消息中包含有名为MGRLVLLS（code 0x2114）的对象。当MGRLVLLS消息足够大（1Kb字节）时，就会触发缓冲区溢出。如果客户端在发送完这个消息后立即终止连接，就会导致终止服务进程。 如果LOAD命令中的REPLACE...

IBM DB2握手协议拒绝服务漏洞

IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。 IBM DB2处理认证操作的实现上存在漏洞，远程攻击者可能导致服务器拒绝服务。 通过用户口令认证创建到DB2...

IBM DB2 JDBC Applet Server Detection

The remote host is running an IBM DB2 JDBC Applet Server. DB2 is a commercial database from IBM, and the JDBC Applet Server is used by Java apps and applets to communicate with a DB2 server using the type 3 a.k.a 'net' driver. Note that use of this driver has been deprecated since DB2 V8.1. C...

IBM DB2 Connection Port Detection

The remote host is running IBM DB2 with an open connection port for a DB2 instance. IBM DB2 is a commercial database, and a connection port is used by remote clients when connecting to a DB2 server instance. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid22416;...

IBM DB2 Interrupt Port Detection

The remote host is running IBM DB2, with an open interrupt port for a DB2 instance. DB2 is an enterprise database solution, and an interrupt port is used to support requests from down-level clients. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

[Full-disclosure] Details for BID 19586 - DB2 UDB Vulnerability

DB2 UDB - Handshake Protocol DoS Attack BID 19586 Background DB2 Universal Database UDBtm is a popular database software package from IBM available for legacy platforms as well as open systems Unix and Windows. Clients use a protocol called DRDA to communicate with the DB2 UDB server. Protocol...

IBM DB2 database server DoS

Multiple DoS conditions in database server...

[Full-disclosure] Details for BID 18428

DB2 UDB - Unauthenticated Buffer Overflow and DoS BID 18428 Background DB2 Universal Database UDBtm is a popular database software package from IBM available for legacy platforms as well as open systems Unix and Windows. Clients use a protocol called DRDA to communicate with the DB2 UDB server...

CVE-2006-4257

IBM DB2 Universal Database UDB before 8.1 FixPak 13 allows remote authenticated users to cause a denial of service crash by 1 sending the first ACCSEC command without an RDBNAM parameter during the CONNECT process, or 2 sending crafted SQLJRA packet, which results in a null dereference...

CVE-2006-4257

IBM DB2 Universal Database UDB before 8.1 FixPak 13 allows remote authenticated users to cause a denial of service crash by 1 sending the first ACCSEC command without an RDBNAM parameter during the CONNECT process, or 2 sending crafted SQLJRA packet, which results in a null dereference...

CVE-2006-4257

CVE-2006-4257 affects IBM DB2 UDB prior to 8.1 FixPak 13. A remote authenticated attacker can cause a denial-of-service (crash) by (1) sending the first ACCSEC command without an RDBNAM parameter during the CONNECT process, or (2) sending a crafted SQLJRA packet, which results in a NULL dereferen...

[SA21550] DB2 Universal Database Denial of Service Vulnerabilities

TITLE: DB2 Universal Database Denial of Service Vulnerabilities SECUNIA ADVISORY ID: SA21550 VERIFY ADVISORY: http://secunia.com/advisories/21550/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: DB2 Universal Database 8.x http://secunia.com/product/857/ DESCRIPTION: Two...

DoS против IBM DB2

Закрытие соединения после передачи 1 байта информации приводит к краху сервиса...

Multiple Buffer Overflow Vulnerabilities in Informix

NGSSoftware Insight Security Research Advisory Name: Multiple Buffer Overflow Vulnerabilities in Informix Systems Affected: All versions of Informix Severity: High Vendor URL: http://www.ibm.com/ Author: David Litchfield [email protected] Date of Public Advisory: 2nd August 2006 Advisory...

IBM DB2 Version Detection

Binary data 3698.prm...

IBM DB2 Discovery Service Detection

The remote host is running an IBM DB2 discovery service. DB2 is an enterprise database solution, and the discovery service is used by DB2 to locate databases across a network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid22017; scriptversion"1.16";...