CVE-2008-4691

CVE-2008-4691 affects IBM DB2 9.1 before FP6. An unspecified issue in the SQLNLS_UNPADDEDCHARLEN function of the New Compiler (Starburst-derived compiler) can cause a segmentation fault, resulting in a denial of service. Remediation is provided by IBM Fix Pack 6 for DB2 9.1; APARs and fix listing...

CVE-2008-4692: Undefined Security Weakness

The Native Managed Provider for .NET component in IBM DB2 8 before FP17, 9.1 before FP6, and 9.5 before FP2, when a definer cannot maintain objects, preserves views and triggers without marking them inoperative or dropping them, which has unknown impact and attack vectors...

CVE-2008-4693: Exposure of Sensitive Information to an Unauthorized Actor

The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES."...

CVE-2008-4691: Undefined Security Weakness

Unspecified vulnerability in the SQLNLSUNPADDEDCHARLEN function in the New Compiler aka Starburst derived compiler component in the server in IBM DB2 9.1 before FP6 allows attackers to cause a denial of service segmentation violation and trap via unknown vectors...

IBM DB2 9.1 < Fix Pack 6 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.1 running on the remote host is affected by one or more of the following issues : - An unspecified error in 'SQLNLSUNPADDEDCHARLEN' may lead to a segmentation fault in the DB2 server. LI73364 - DB2 does not mark inoperative or drop views and...

[SECURITY] Fedora 8 Update: rubygem-rails-2.1.1-2.fc8

Rails is a framework for building web-application using CGI, FCGI, modruby, or WEBrick on top of either MySQL, PostgreSQL, SQLite, DB2, SQL Server, or Oracle with eRuby- or Builder-based templates...

[SECURITY] Fedora 9 Update: rubygem-rails-2.1.1-2.fc9

Rails is a framework for building web-application using CGI, FCGI, modruby, or WEBrick on top of either MySQL, PostgreSQL, SQLite, DB2, SQL Server, or Oracle with eRuby- or Builder-based templates...

IBM DB2 Universal Database Multiple Vulnerabilities - Sept08 (Linux)

The host is running DB2 Database Server, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmdb28udbmultvulnlin900216.nasl 7174 2017-09-18 11:48:08Z asteins $ Description: IBM DB2 Universal Database Multiple Vulnerabilities - Sept08 Linux Authors: Veerendra GG...

IBM DB2 Universal Database Multiple Vulnerabilities - Sept08 (Windows)

The host is running DB2 Database Server, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmdb28udbmultvulnwin900215.nasl 7174 2017-09-18 11:48:08Z asteins $ Description: IBM DB2 Universal Database Multiple Vulnerabilities - Sept08 Windows Authors: Veerendra GG...

IBM DB2 Server Detection (Windows)

This script detects the version of IBM DB2 Server and saves the results in KB. OpenVAS Vulnerability Test $Id: secpodibmdb2detectwin900218.nasl 5372 2017-02-20 16:26:11Z cfi $ Description: IBM DB2 Server Detection Windows Authors: Veerendra GG Copyright: Copyright C 2008 SecPod,...

IBM DB2 Server Detection (Linux)

This script detects the version of IBM DB2 Server and saves the results in KB. OpenVAS Vulnerability Test $Id: secpodibmdb2detectlinux900217.nasl 7823 2017-11-20 08:54:04Z cfischer $ Description: IBM DB2 Server Detection Linux Authors: Veerendra GG Copyright: Copyright C 2008 SecPod,...

IBM Db2 Detection (SMB)

This script performs a SMB based detection of IBM Db2 Server. Copyright C 2008 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

IBM Db2 Detection (Linux/Unix SSH Login)

SSH login-based detection of IBM Db2 Server. Copyright C 2008 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

IBM Db2 Universal Database Multiple Vulnerabilities (Sep 2008) - Linux

IBM Db2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Db2 Universal Database Multiple Vulnerabilities (Sep 2008) - Windows

IBM Db2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM DB2 multiple security vulnerabilities

XMLQUERY and XMLEXIST buffer overflow, CLR stored procedures privilege escalation and DoS...

Team SHATTER Security Advisory: IBM DB2 UDB - Buffer overrun in XMLQUERY and XMLEXISTS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Buffer overrun in XMLQUERY and XMLEXISTS September 15th 2008 Risk Level: High Affected versions: IBM DB2 Database Server v9.1 and 9.5 on Windows platform. Remote exploitable: Yes Authentication to Database Server is need...

DB2 < 8 FixPak 17 Multiple Vulnerabilities (deprecated)

Binary data 4680.prm...

IBM DB2 Universal Database Server 8.2 Fixpak 17之前存在多个漏洞

BUGTRAQ ID: 31058 CNCAN ID：CNCAN-2008091101 IBM DB2是一款大型的商业关系数据库系统， IBM DB2 Universal Database Server 8.2 Fixpak 17之前版本存在多个漏洞，攻击者可以利用漏洞进行如下攻击： -相关CONNECT / ATTACH处理存在远程拒绝服务攻击。 -DB2FMP过程存在未明安全问题。 -DB2JDS存在远程拒绝服务攻击。 -在Windows平台下以系统特权执行DB2FMP过程。 攻击者可以利用这些漏洞进行拒绝服务攻击，也可能造成其他未明攻击行为。 IBM DB2 Universal...

IBM DB2 8 < Fix Pack 17 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 8 running on the remote host is affected by multiple issues : - By sending malicious DB2 UDB v7 client CONNECT/DETACH requests it may be possible to crash the remote DB2 server. IZ08134 - Failure to switch the owner of the 'DB2FMP' process may...