IBM DB2 9.7 < Fix Pack 6 Multiple Vulnerabilities

According to its version, the installation of DB2 9.7 running on the remote host is prior to Fix Pack 6. It is, therefore, affected by multiple vulnerabilities : - A local user can exploit a vulnerability in the bundled IBM Tivoli Monitoring Agent ITMA to escalate their privileges. CVE-2011-4061 ...

IBM DB2 XML Feature DoS and CREATE VARIABLE Security Bypass Vulnerabilities

The host is running IBM DB2 and is prone to denial of service and security bypass vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmdb2xmldosncreatevarsecbypassvuln.nasl 5999 2017-04-21 09:02:32Z teissa $ IBM DB2 XML Feature DoS and CREATE VARIABLE Security Bypass Vulnerabilities Authors:...

CVE-2012-0709

IBM DB2 for Linux, UNIX and Windows is affected by CVE-2012-0709. A remote authenticated user can bypass viewing restrictions on table data by exploiting CREATEIN privileges to execute crafted CREATE VARIABLE statements. Affected: DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4. Root cau...