CVE-2007-4275: Undefined Security Weakness

Multiple untrusted search path vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to gain privileges via certain vectors related to 1 DB2 instance or FMP startup on Linux and Solaris; 2 exec of executables while running as root on non-Windows systems, as...

CVE-2007-4276: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows attackers to execute arbitrary code via a long DASPROF and possibly other environment variables, which are copied into the buildDasPaths buffer...

CVE-2007-4418: Undefined Security Weakness

IBM DB2 UDB 8 before Fixpak 15 does not properly check authorization, which allows remote authenticated users with a certain SELECT privilege to have an unknown impact via unspecified vectors. NOTE: this issue is probably related to CVE-2007-1089, but this is uncertain due to lack of details...

iDefense Security Advisory 08.16.07: IBM DB2 Universal Database buildDasPaths Buffer Overflow Vulnerability

IBM DB2 Universal Database buildDasPaths Buffer Overflow Vulnerability iDefense Security Advisory 08.16.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 16, 2007 I. BACKGROUND IBM Corp.'s DB2 Universal Database product is a large database server product commonly used for high end...

CVE-2007-4417: Undefined Security Weakness

IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 does not properly revoke privileges on methods, which allows remote authenticated users to execute a method after revocation until the routine auth cache is flushed...

Immunity Canvas: DB2_JDBC

Name| db2jdbc ---|--- CVE| CVE-2007-2582 Exploit Pack| CANVAS Description| IBM DB2 JDBC Applet Server Overflow Notes| References: http://www.zerodayinitiative.com/advisories/ZDI-07-056.html CVE Name: CVE-2007-2582 VENDOR: IBM Notes: Repeatability: Date public: 10/10/07 CVE Url:...

Buffer overflow

Multiple buffer overflows in the DB2 JDBC Applet Server DB2JDS service in IBM DB2 9.x and earlier allow remote attackers to 1 execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via 2 an invalid LANG parameter or 2 a long packet that...

CVE-2007-2582

Multiple buffer overflows in the DB2 JDBC Applet Server DB2JDS service in IBM DB2 9.x and earlier allow remote attackers to 1 execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via 2 an invalid LANG parameter or 2 a long packet that...

CVE-2007-2582

The IBM DB2JDS vulnerability (CVE-2007-2582) in IBM DB2 9.x and earlier allows remote code execution via a crafted packet to the DB2JDS service on TCP port 6789, and also DoS through an invalid LANG parameter or an oversized packet causing a MemTree overflow. IBM TRIRIGA Application Platform is n...

EUVD-2007-2575

Multiple buffer overflows in the DB2 JDBC Applet Server DB2JDS service in IBM DB2 9.x and earlier allow remote attackers to 1 execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via 2 an invalid LANG parameter or 2 a long packet that...

CVE-2007-2582

Multiple buffer overflows in the DB2 JDBC Applet Server DB2JDS service in IBM DB2 9.x and earlier allow remote attackers to 1 execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via 2 an invalid LANG parameter or 2 a long packet that...

CVE-2007-2582: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the DB2 JDBC Applet Server DB2JDS service in IBM DB2 9.x and earlier allow remote attackers to 1 execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via 2 an invalid LANG parameter or 2 a long packet that...

Design/Logic Flaw

IBM DB2 UDB 8.2 before Fixpak 7 aka fixpack 14, and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to access certain unauthorized directories...

CVE-2007-1228

IBM DB2 UDB 8.2 before Fixpak 7 aka fixpack 14, and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to access certain unauthorized directories...

CVE-2007-1228

IBM DB2 UDB 8.2 before Fixpak 7 (aka fixpack 14) and DB2 9 before Fix Pack 2 on UNIX allow the fenced user to access certain unauthorized directories. Root cause: insufficient access restriction for the fenced process. Impact, as stated: unauthorized directory access (no broader impact detailed)....

CVE-2007-1228

IBM DB2 UDB 8.2 before Fixpak 7 aka fixpack 14, and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to access certain unauthorized directories...

IBM DB2 DB2DIAG.LOG文件本地任意文件覆盖漏洞

IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。 IBM DB2的某些设置suid位的二进制工具程序处理日志文件时存在安全漏洞，允许本地用户利用DB2DIAG.LOG临时文件通过符号链接攻击覆盖任意文件，可能导致拒绝服务或完全控制系统。 此漏洞不影响Windows平台。 IBM DB2 Universal Database 9.1 IBM DB2 Universal Database 8.x 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2007-1228: Improper Authentication

IBM DB2 UDB 8.2 before Fixpak 7 aka fixpack 14, and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to access certain unauthorized directories...

IBM DB2 Universal Database多个本地权限提升漏洞

IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。 一些setuid-root二进制程序中存在不安全的文件访问漏洞。具体来讲，如果提供了某些环境变量的话，DB2管理二进制程序会使用指定的文件名保存数据，这可能允许攻击者以root权限创建或附加任意文件。 在从环境变量拷贝数据时存在堆溢出漏洞，在没有确保正确的NUL终止的情况下便将变量内容拷贝到了静态的BSS段缓冲区，这允许攻击者在之后的函数调用中触发堆溢出。...

Heap overflow

IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables that trigger a heap-based buffer overflow...