Immunity Canvas: DB2_JDBC

Name| db2jdbc ---|--- CVE| CVE-2007-2582 Exploit Pack| CANVAS Description| IBM DB2 JDBC Applet Server Overflow Notes| References: http://www.zerodayinitiative.com/advisories/ZDI-07-056.html CVE Name: CVE-2007-2582 VENDOR: IBM Notes: Repeatability: Date public: 10/10/07 CVE Url:...

Buffer overflow

Multiple buffer overflows in the DB2 JDBC Applet Server DB2JDS service in IBM DB2 9.x and earlier allow remote attackers to 1 execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via 2 an invalid LANG parameter or 2 a long packet that...

CVE-2007-2582

Multiple buffer overflows in the DB2 JDBC Applet Server DB2JDS service in IBM DB2 9.x and earlier allow remote attackers to 1 execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via 2 an invalid LANG parameter or 2 a long packet that...

EUVD-2007-2575

Multiple buffer overflows in the DB2 JDBC Applet Server DB2JDS service in IBM DB2 9.x and earlier allow remote attackers to 1 execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via 2 an invalid LANG parameter or 2 a long packet that...

CVE-2007-2582

The IBM DB2JDS vulnerability (CVE-2007-2582) in IBM DB2 9.x and earlier allows remote code execution via a crafted packet to the DB2JDS service on TCP port 6789, and also DoS through an invalid LANG parameter or an oversized packet causing a MemTree overflow. IBM TRIRIGA Application Platform is n...

Fedora Core 4 : postgresql-8.0.8-1.FC4.1 (2006-579)

Mon May 22 2006 Tom Lane 8.0.8-1.FC4.1 - Update to PostgreSQL 8.0.8 includes fixes for CVE-2006-2313, CVE-2006-2314; see bug 192173 - Update to jdbc driver build 316 - Suppress noise from chcon, per bug 187744 - Repair extraneous quote in pgtcl configure script ... odd that bash didn't use to...

Fedora Core 5 : postgresql-8.1.4-1.FC5.1 (2006-578)

Mon May 22 2006 Tom Lane 8.1.4-1.FC5.1 - Update to PostgreSQL 8.1.4 includes fixes for CVE-2006-2313, CVE-2006-2314; see bug 192173 - Update to PyGreSQL 3.8 - Update to jdbc driver build 406 - Suppress noise from chcon, per bug 187744 Note that Tenable Network Security has extracted the preceding...

CRYPTO-Server installvariables.properties LDAP Credential Local Disclosure

A version of CRYPTOCard CRYPTO-Server, the server component of a commercial two-factor authentication system, is installed on the remote host. When CRYPTO-Server was installed on the remote host, the installer left credentials used to configure the application with Active Directory in a log file,...

IBM DB2 JDBC Applet Server Detection

The remote host is running an IBM DB2 JDBC Applet Server. DB2 is a commercial database from IBM, and the JDBC Applet Server is used by Java apps and applets to communicate with a DB2 server using the type 3 a.k.a 'net' driver. Note that use of this driver has been deprecated since DB2 V8.1. C...

Design/Logic Flaw

Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly, which could allow attackers to bypass intended policies...

CVE-2006-2470

Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly, which could allow attackers to bypass intended policies...

CVE-2006-2470

Technical details about CVE-2006-2470 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2006-2470

Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly, which could allow attackers to bypass intended policies...

CVE-2005-4668

The embedded HSQLDB in ParosProxy before 3.2.7, when running with JDK 1.4.2 before 1.4.208, allows local users to execute arbitrary comands via crafted SQL commands that interact with HSQLDB through JDBC, a similar vulnerability to CVE-2003-0845...

CVE-2005-4668

The embedded HSQLDB in ParosProxy before 3.2.7, when running with JDK 1.4.2 before 1.4.208, allows local users to execute arbitrary comands via crafted SQL commands that interact with HSQLDB through JDBC, a similar vulnerability to CVE-2003-0845...

CVE-2005-4866

Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminato...

HSQLDB Server Detection

The remote host is running HSQLDB, an open source database written in Java, and its database engine is listening on TCP port 9001 for network server database connections using JDBC. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20065; scriptversion"1.16";...

CVE-2005-1961

The CVE affects ObjectWeb Consortium C-JDBC prior to 1.3.1, where a local-user access control bypass allows reading the cache results of another user. The underlying issue is an improper enforcement of user isolation, enabling unintended exposure of cached data. Impact is limited to local attacke...

CVE-2005-1961

Unknown vulnerability in ObjectWeb Consortium C-JDBC before 1.3.1 allows local users to bypass intended access restrictions and obtain the cache results from another user...

[SA15627] C-JDBC Exposure of Cached Results

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...