CVE-2007-3676: Undefined Security Weakness

IBM DB2 Universal Database UDB Administration Server DAS 8 before Fix Pack 16 and 9 before Fix Pack 4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via modified pointer values in unspecified remote administration requests, which triggers memory...

CVE-2007-5757: Undefined Security Weakness

Untrusted search path vulnerability in db2pd in IBM DB2 Universal Database UDB 8 before FixPak 16 and 9 before Fix Pack 4 allows local users to gain root privileges via a modified DB2INSTANCE environment variable that points to a malicious library. NOTE: this might be the same issue as...

CVE-2007-1089: Undefined Security Weakness

IBM DB2 Universal Database UDB 9.1 GA through 9.1 FP1 allows local users with table SELECT privileges to perform unauthorized UPDATE and DELETE SQL commands via unknown vectors...

CVE-2006-3067: Undefined Security Weakness

Multiple unspecified vulnerabilities in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allow remote attackers to cause a denial of service application crash via a 1 "long column list" in the a REPLACE INTO and b INSERT INTO portions of the LOAD command or a 2 large number of values in an IN...

CVE-2006-3066: Undefined Security Weakness

Buffer overflow in the TCP/IP listener in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allows remote attackers to cause a denial of service application crash via a long MGRLVLLS message inside of an EXCSAT message when establishing a connection...

CVE-2006-3068: Undefined Security Weakness

IBM DB2 Universal Database UDB before 8.2 FixPak 12 allows remote attackers to cause a denial of service application crash by sending "incorrect information ... regarding the package name/creator," which leads to a "memory overwrite."...

CVE-2005-4740: Undefined Security Weakness

IBM DB2 Universal Database UDB 810 before version 8 FixPak 10 allows remote authenticated users to cause a denial of service db2jd service crash by "connecting from a downlevel client."...

CVE-2005-4735: Undefined Security Weakness

IBM DB2 Universal Database UDB 810 before 8.1 FP10 allows remote authenticated users to cause a denial of service application crash via 1 certain equality predicates that trigger self-removal, aka IY70808; and 2 a query with more than 32000 elements in the IN-list, aka LI70817...

CVE-2005-4737: Undefined Security Weakness

IBM DB2 Universal Database UDB 820 before ESE AIX 5765F4100 allows remote authenticated users to cause a denial of service CPU consumption by "abnormally" terminating a connection, which prevents db2agents from being properly cleared...

CVE-2005-4739: Undefined Security Weakness

IBM DB2 Universal Database UDB 820 before version 8 FixPak 10 s050811 allows remote authenticated users to cause a denial of service application crash by using a table function for an instance of snapshottbreorg, which triggers a trap in sqlnrEStoEaction...

CVE-2005-4738: Undefined Security Weakness

IBM DB2 Universal Database UDB 810 before ESE AIX 5765F4100 does not ensure that a user has execute privileges before permitting object creation based on routines, which allows remote authenticated users to gain privileges...

CVE-2005-4736: Undefined Security Weakness

IBM DB2 Universal Database UDB 820 before 8.2 FP10 allows remote authenticated users to cause a denial of service disk consumption via a hash join hsjn that triggers an infinite loop in sqlrihsjnFlushBlocks...