Security Bulletin: IBM® Db2® Connect Server is vulnerable due to the use of Apache HttpComponents. (CVE-2014-3577)

Summary IBM® Db2® Connect Server is vulnerable due to the use of Apache HttpComponents. Vulnerability Details CVEID:CVE-2014-3577 DESCRIPTION: Apache HttpComponents could allow a remote attacker to conduct spoofing attacks, caused by the failure to verify that the server hostname matches a domain...

CVE-2021-29825: Undefined Security Weakness

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server could disclose sensitive information when using ADMINCMD with LOAD or BACKUP. IBM X-Force ID: 204470...

IBM DB2 Connect 9.7 < FP11 40481 / 10.1 < FP6 40480 / 10.5 < FP11 40479 / 11.1 < FP5 40478 / 11.5 < 11.5.5000.1587 Command Injection

A command injection vulnerability exists in IBM DB2 Connect due to a DLL search order hijacking vulnerability in Microsoft Windows client. An unauthenticated, local attacker can exploit this, by placing a specially crafted file in a compromised folder, to execute arbitrary commands. Note that...

IBM DB2 Connect 10.5 < FP11 40479 / 11.1 < FP5 40478 / 11.5 < 11.5.5000.1587 Buffer Overflow (Windows)

A buffer overflow condition exists in IBM DB2 Connect due to improper bounds checking. An unauthenticated, local attacker can exploit this to execute arbitrary code on the system with root privileges. Note that Nessus has not tested for this issue but has instead relied only on the application's...

PT-2017-2969

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows versions 9.7, 10.1, 10.5, and 11.1 Description The issue is related to insufficient access control in the IBM DB2 database management system and the IBM DB2 Connect Server, which could allow a local user wit...

IBM DB2 Connect 9.7 < FP11 Special Build 36621 / 10.1 < FP6 Special Build 36610 / 10.5 < FP8 Special Build 36605 / 11.1.2 < FP2 Multiple Vulnerabilities (Windows)

According to its version, the installation of IBM DB2 Connect on the remote Windows host is either 9.7 prior to Fix Pack 11 Special Build 36621, 10.1 prior to Fix Pack 6 Special Build 36610, 10.5 prior to Fix Pack 8 Special Build 36605, or 11.1.2 prior to Fix Pack 2. It is, therefore, affected by...

PT-2016-3176

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows versions 9.7, 10.1, 10.5, and 11.1 IBM DB2 Connect Server versions 9.7, 10.1, 10.5, and 11.1 Description The issue is related to insufficient access control in IBM DB2 database management systems, including...

PT-2016-3175

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows versions 9.7, 10.1, 10.5, and 11.1 IBM DB2 Connect Server versions 9.7, 10.1, 10.5, and 11.1 Description The issue is related to insufficient access control in IBM DB2 database management systems, including...

IBM DB2 Connect 9.7 < FP11 Special Build 35317 / 10.1 < FP5 Special Build 35316 / 10.5 < FP7 Special Build 35315 Multiple Vulnerabilities (Windows)

According to its version, the installation of IBM DB2 Connect running on the remote Windows host is either 9.7 prior to fix pack 11 Special Build 35317, 10.1 prior to fix pack 5 Special Build 35316, or 10.5 prior to fix pack 7 Special Build 35315. It is, therefore, affected by the following...

PT-2013-5558

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.5 through 10.5 IBM DB2 Connect versions 9.5 through 10.5 IBM DB2 pureScale Feature 9.8 for Enterprise Server Edition Description The issue allows remote authenticated users to cause a denial of service via unspecified vector...

IBM DB2 Information Disclosure Vulnerability (Windows)

This host is installed with IBM DB2 and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: gbibmdb2infodiscvulnwin.nasl 4869 2016-12-29 11:01:45Z teissa $ IBM DB2 Information Disclosure Vulnerability Windows Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbon...

IBM DB2 Information Disclosure Vulnerability (Linux)

This host is installed with IBM DB2 and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: gbibmdb2infodiscvulnlin.nasl 4869 2016-12-29 11:01:45Z teissa $ IBM DB2 Information Disclosure Vulnerability Linux Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone...