CVE-2009-4333

The Relational Data Services component in IBM DB2 9.5 before FP5 allows attackers to obtain the password argument from the SET ENCRYPTION PASSWORD statement via vectors involving the GET SNAPSHOT FOR DYNAMIC SQL command...

CVE-2009-4335

CVE-2009-4335 concerns multiple unspecified vulnerabilities in the bundled stored procedures of the Spatial Extender component in IBM DB2 9.5 prior to Fix Pack 5. The available sources indicate potential remote exposure with unknown impact, but explicit exploit details are not provided in the doc...

CVE-2009-4328

Unspecified vulnerability in the DRDA Services component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service server trap by calling a SQL stored procedure in unknown circumstances...

CVE-2009-4330

Unspecified vulnerability in db2licm in the Engine Utilities component in IBM DB2 9.5 before FP5 has unknown impact and local attack vectors...

CVE-2009-4326

The CVE-2009-4326 issue affects IBM DB2 9.5 before FP5 and 9.7 before FP1 when the Database Partitioning Feature (DPF) is used. The RAND scalar function in the Common Code Infrastructure can produce repeating values, which may allow an attacker to predict randomness and defeat protection mechanis...

CVE-2009-4334

The Self Tuning Memory Manager STMM component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 uses 0666 permissions for the STMM log file, which allows local users to cause a denial of service or have unspecified other impact by writing to this file...

CVE-2009-4335

Multiple unspecified vulnerabilities in bundled stored procedures in the Spatial Extender component in IBM DB2 9.5 before FP5 have unknown impact and remote attack vectors, related to "remote exploits."...

CVE-2009-4330

IBM DB2 9.5 before FP5 is vulnerable in the Engine Utilities component (db2licm) with an unspecified impact and local attack vectors. Affected product/version: IBM DB2 UDB 9.5 prior to Fix Pack 5. Underlying issue: unspecified vulnerability in db2licm; CVSSv2 base 7.2 (LOCAL, HIGH). Remediation: ...

CVE-2009-4332

CVE-2009-4332 affects IBM DB2: db2pd in the Problem Determination component is vulnerable to a denial of service caused by a NULL pointer dereference. Affected products/versions include IBM DB2 9.1 before FP7 and 9.5 before FP5. The issue can trigger via unspecified vectors and results in applica...

CVE-2009-4327

CVE-2009-4327 affects IBM DB2 (Common Code Infrastructure), specifically in DB2 9.5 before FP5 and 9.7 before FP1. The flaw is improper validation of the memory pool size during creation, allowing a denial of service via memory consumption. Exploitation details are not provided in the documents; ...

CVE-2009-4328

CVE-2009-4328 concerns IBM DB2 UDB 9.5 before Fix Pack 5, where an unspecified issue in the DRDA Services component allows remote authenticated users to trigger a denial of service (server trap) by calling a SQL stored procedure under certain conditions. The impact is a partial availability degra...

CVE-2009-4331

The CVE-2009-4331 issue affects IBM DB2 Install component in DB2 9.5 before FP5 and 9.7 before FP1. According to the provided sources, the Install component configures the High Availability (HA) scripts with incorrect file-permission and authorization settings. The material specifies the impact a...

CVE-2009-4327

The Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1 does not properly validate the size of a memory pool during a creation attempt, which allows attackers to cause a denial of service memory consumption via unspecified vectors...

CVE-2009-4325

The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not validate an unspecified pointer, which allows attackers to overwrite "external memory" via unknown vectors, related to a missing "check for null pointers."...

CVE-2009-4325: Improper Input Validation

The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not validate an unspecified pointer, which allows attackers to overwrite "external memory" via unknown vectors, related to a missing "check for null pointers."...

CVE-2009-4330: Undefined Security Weakness

Unspecified vulnerability in db2licm in the Engine Utilities component in IBM DB2 9.5 before FP5 has unknown impact and local attack vectors...

CVE-2009-4326: Exposure of Sensitive Information to an Unauthorized Actor

The RAND scalar function in the Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1, when the Database Partitioning Feature DPF is used, produces "repeating" return values, which might allow attackers to defeat protection mechanisms based on randomization by predicti...

CVE-2009-4333: Exposure of Sensitive Information to an Unauthorized Actor

The Relational Data Services component in IBM DB2 9.5 before FP5 allows attackers to obtain the password argument from the SET ENCRYPTION PASSWORD statement via vectors involving the GET SNAPSHOT FOR DYNAMIC SQL command...

IBM DB2 9.5 < Fix Pack 5 Multiple Unspecified Vulnerabilities

The IBM DB2 database server installed on the remote host is prior to 9.5 Fix Pack 5. It is, therefore, affected by multiple unspecified vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid43172;...

CVE-2009-4327: Improper Input Validation

The Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1 does not properly validate the size of a memory pool during a creation attempt, which allows attackers to cause a denial of service memory consumption via unspecified vectors...