Ingres Data Access Server Detection

The remote service is an Ingres Data Access Server, which translates requests from the JDBC driver and .NET Data Provider into an internal format and forwards them to the appropriate DBMS server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Buffer overflow

Multiple buffer overflows in the DB2 JDBC Applet Server DB2JDS service in IBM DB2 9.x and earlier allow remote attackers to 1 execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via 2 an invalid LANG parameter or 2 a long packet that...

Immunity Canvas: DB2_JDBC

Name| db2jdbc ---|--- CVE| CVE-2007-2582 Exploit Pack| CANVAS Description| IBM DB2 JDBC Applet Server Overflow Notes| References: http://www.zerodayinitiative.com/advisories/ZDI-07-056.html CVE Name: CVE-2007-2582 VENDOR: IBM Notes: Repeatability: Date public: 10/10/07 CVE Url:...

CVE-2007-2582

Multiple buffer overflows in the DB2 JDBC Applet Server DB2JDS service in IBM DB2 9.x and earlier allow remote attackers to 1 execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via 2 an invalid LANG parameter or 2 a long packet that...

EUVD-2007-2575

Multiple buffer overflows in the DB2 JDBC Applet Server DB2JDS service in IBM DB2 9.x and earlier allow remote attackers to 1 execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via 2 an invalid LANG parameter or 2 a long packet that...

CVE-2007-2582

The IBM DB2JDS vulnerability (CVE-2007-2582) in IBM DB2 9.x and earlier allows remote code execution via a crafted packet to the DB2JDS service on TCP port 6789, and also DoS through an invalid LANG parameter or an oversized packet causing a MemTree overflow. IBM TRIRIGA Application Platform is n...

CVE-2007-2582: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the DB2 JDBC Applet Server DB2JDS service in IBM DB2 9.x and earlier allow remote attackers to 1 execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via 2 an invalid LANG parameter or 2 a long packet that...

Fedora Core 4 : postgresql-8.0.8-1.FC4.1 (2006-579)

Mon May 22 2006 Tom Lane 8.0.8-1.FC4.1 - Update to PostgreSQL 8.0.8 includes fixes for CVE-2006-2313, CVE-2006-2314; see bug 192173 - Update to jdbc driver build 316 - Suppress noise from chcon, per bug 187744 - Repair extraneous quote in pgtcl configure script ... odd that bash didn't use to...

Fedora Core 5 : postgresql-8.1.4-1.FC5.1 (2006-578)

Mon May 22 2006 Tom Lane 8.1.4-1.FC5.1 - Update to PostgreSQL 8.1.4 includes fixes for CVE-2006-2313, CVE-2006-2314; see bug 192173 - Update to PyGreSQL 3.8 - Update to jdbc driver build 406 - Suppress noise from chcon, per bug 187744 Note that Tenable Network Security has extracted the preceding...

CRYPTO-Server installvariables.properties LDAP Credential Local Disclosure

A version of CRYPTOCard CRYPTO-Server, the server component of a commercial two-factor authentication system, is installed on the remote host. When CRYPTO-Server was installed on the remote host, the installer left credentials used to configure the application with Active Directory in a log file,...

IBM DB2 JDBC Applet Server Detection

The remote host is running an IBM DB2 JDBC Applet Server. DB2 is a commercial database from IBM, and the JDBC Applet Server is used by Java apps and applets to communicate with a DB2 server using the type 3 a.k.a 'net' driver. Note that use of this driver has been deprecated since DB2 V8.1. C...

Design/Logic Flaw

Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly, which could allow attackers to bypass intended policies...

CVE-2006-2470

Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly, which could allow attackers to bypass intended policies...

CVE-2006-2470

Technical details about CVE-2006-2470 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2006-2470

Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly, which could allow attackers to bypass intended policies...

CVE-2006-2470: Undefined Security Weakness

Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly, which could allow attackers to bypass intended policies...

CVE-2005-4668

The embedded HSQLDB in ParosProxy before 3.2.7, when running with JDK 1.4.2 before 1.4.208, allows local users to execute arbitrary comands via crafted SQL commands that interact with HSQLDB through JDBC, a similar vulnerability to CVE-2003-0845...

CVE-2005-4668: Undefined Security Weakness

The embedded HSQLDB in ParosProxy before 3.2.7, when running with JDK 1.4.2 before 1.4.208, allows local users to execute arbitrary comands via crafted SQL commands that interact with HSQLDB through JDBC, a similar vulnerability to CVE-2003-0845...

CVE-2005-4668

The embedded HSQLDB in ParosProxy before 3.2.7, when running with JDK 1.4.2 before 1.4.208, allows local users to execute arbitrary comands via crafted SQL commands that interact with HSQLDB through JDBC, a similar vulnerability to CVE-2003-0845...

CVE-2005-4866

Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminato...