4509 matches found
IBM DB2 DTS To String Conversion - Denial of Service
IBM DB2 DTS To String Conversion - Denial of Service source: https://www.securityfocus.com/bid/11400/info IBM DB2 is reported prone to a denial of service vulnerability when DTS to string conversion is carried out. It is reported that during a DTS to string conversion a trap occurs if an empty...
IBM DB2 - Universal Database Information Disclosure
source: https://www.securityfocus.com/bid/11402/info An information disclosure vulnerability has been reported in IBM DB2. This vulnerability only exists when DB2 is installed on Microsoft Windows operating systems. This is due to a Windows permissions issue related to shared memory sections,...
CVE-2003-1051
Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to 1 db2start, 2 db2stop, or 3 db2govd...
CVE-2004-0795
CVE-2004-0795 affects IBM DB2 Universal Database 8.1: the DB2RCMD remote command server (DB2REMOTECMD named pipe) can cause the db2rcmdc.exe process to run as the db2admin administrator, enabling a locally authenticated user to gain privileges. Public references describe an exploit path via the D...
CVE-2003-1052
CVE-2003-1052 affects IBM DB2 7.1 and 8.1. The vulnerability allows the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs. The provided documents do not specify the root cause details beyond this behavior, nor do they provide explicit exploit...
CVE-2002-1583
CVE-2002-1583 describes a local buffer overflow in IBM DB2 Universal Database (DB2 UDB) versions 6.0 and 7.0, triggered by a long username read from a file descriptor argument within sqllib/security/db2ckpw. The underlying issue is a vulnerability in handling the username input that can overflow ...
CVE-2003-1049
IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions 777, which allows local users to modify or delete certain DB2 files...
CVE-2002-1583
Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file descriptor argument...
CVE-2003-1050
Consolidated details from connected documents: IBM DB2 Universal Database 8.1 contains multiple buffer overflows that allow local users to execute arbitrary code via long command line arguments to (1) db2start, (2) db2stop, or (3) db2govd. The vulnerability is local-privilege escalation with pote...
CVE-2003-1051
CVE-2003-1051 affects IBM DB2 Universal Database 8.1. It describes multiple format-string vulnerabilities that could allow local users to execute arbitrary code via certain command-line arguments to db2start, db2stop, or db2govd. Root cause: format string handling issues in the involved binaries....
CVE-2003-1052
IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs...
CVE-2004-0795
DB2 8.1 remote command server DB2RCMD.EXE executes the db2rcmdc.exe program as the db2admin administrator, which allows local users to gain privileges via the DB2REMOTECMD named pipe...
CVE-2003-1050
Multiple buffer overflows in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via long command line arguments to 1 db2start, 2 db2stop, or 3 db2govd...
CVE-2003-1049
CVE-2003-1049 affects IBM DB2 Universal Database 7 before FixPak 12, where DMS directories are created with insecure 777 permissions, allowing local users to modify or delete certain DB2 files. Root cause: insecure directory permissions on DMS components. Impact as per CVSS: partial confidentiali...
IBM DB2 9.1 < 9.1 Fix Pack 7 / 9.5 < 9.5 Fix Pack 4 Multiple Vulnerabilities
Binary data 5043.prm...
IBM DB2 9.1 < 9.1 Fix Pack 7 Information Disclosure
Binary data 5006.prm...
IBM DB2 Client Detection
Binary data 5119.prm...
IBM DB2 9.x < 9 Fix Pack 5 Multiple Vulnerabilities
Binary data 4536.prm...
DB2 RPC privilege escalation
It's possible to attach to a process with administrator privileges...
[VulnWatch] IBM DB2 Remote Command Execution Privilege Upgrade (#NISR09032004)
NGSSoftware Insight Security Research Advisory Name: IBM DB2 Remote Command Execution Privilege Upgrade Systems Affected: DB2 8.1 Enterprise Edition on Windows Severity: High/Low depending on environment Vendor URL: http://www.ibm.com/ Author: David Litchfield [email protected] Date Vendor...