IBM DB2 'kuddb2' Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38018/info IBM DB2 is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the application to crash, denying service to legitimate users. IBM DB2 9.7 is vulnerable; other versions...

IBM DB2 Universal Database for Windows NT 6.1/7.1 SQL DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2067/info IBM DB2 Universal Database is a distributed database application. It may be possible for a database user to crash the server through a bug in handling certain queries. If a certain query is executed that contain...

IBM DB2 DTS To String Conversion - Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11400/info IBM DB2 is reported prone to a denial of service vulnerability when DTS to string conversion is carried out. It is reported that during a DTS to string conversion a trap occurs if an empty formatting string is...

IBM DB2 db2dart Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8552/info It has been reported that the IBM DB2 db2dart utility is prone to locally exploitable buffer overflow vulnerability. A local attacker, who can authenticate or has access as the db2as user, may exploit this issue...

IBM DB2 < 9.5 pack 3a - Data Stream Denial of Service Exploit

No description provided by source. Discovered by Dennis Yurichev [email protected] DB2TEST database should be present on target system GUEST account with QQ password shoule be present on target system from sys import from socket import sockobj = socketAFINET, SOCKSTREAM sockobj.connect argv1, 500...

IBM DB2 Universal Database for Linux 6.1/Windows NT 6.1 Known Default Password Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2068/info IBM DB2 Universal Database is a distributed database application. DB2 Universal Database contains a default username and password that would enable a user access to the database. During the installation of DB2,...

IBM DB2 db2job File Overwrite Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8344/info IBM's DB2 database ships with a utility called db2job, installed with permissions 4550 and owned by root.db2asgrp. It has been reported that db2job writes to a number of files with root privileges. The files...

IBM DB2 9.8 <= Fix Pack 5 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 running on the remote host is version 9.8 prior or equal to Fix Pack 5. It is, therefore, affected by one or more of the following vulnerabilities : - An unspecified error exists in the GSKit component when initiating SSL/TLS connections due t...

IBM DB2 9.7 < Fix Pack 9a Multiple Vulnerabilities

According to its version, the installation of DB2 9.7 running on the remote host is prior to Fix Pack 9a. It is, therefore, affected by one or more of the following vulnerabilities : - An unspecified error exists related to handling malformed certificate chains that allows denial of service...

IBM DB2 9.1 TLS/SSL Multiple DoS Vulnerabilities

According to its version, the installation of IBM DB2 running on the remote host is version 9.1. It is, therefore, affected by one or more of the following vulnerabilities : - An unspecified error exists related to handling malformed certificate chains that could allow denial of service attacks...

IBM DB2 10.1 < Fix Pack 3a Multiple Vulnerabilities

According to its version, the installation of IBM DB2 10.1 running on the remote host is prior to Fix Pack 3a. It is, therefore, affected by one or more of the following vulnerabilities : - The included version of GSKit contains an error related to CBC-mode and timing that could allow an attacker...

IBM DB2 Stored Procedure Infrastructure Privilege Escalation Vulnerability

According to its version, the installation of IBM DB2 running on the remote host is affected by a privilege escalation vulnerability. An error exists related to the Stored Procedure infrastructure and the 'CREATEEXTERNALROUTINE' authority that allows an authenticated user to escalate privileges...

IBM DB2 10.5 < Fix Pack 3a Multiple Vulnerabilities

According to its version, the installation of IBM DB2 10.5 running on the remote host is prior to Fix Pack 3a. It is, therefore, affected by one or more of the following vulnerabilities : - An unspecified error exists related to handling malformed certificate chains that could allow denial of...

IBM DB2 9.5 <= Fix Pack 9 or 10 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.5 running on the remote host is prior or equal to Fix Pack 9 or 10. It is, therefore, reportedly affected by one or more of the following vulnerabilities : - An unspecified error exists related to handling malformed certificate chains that...

IBM DB2 privilege escalation

Insecure dynamic libraries loading...

CVE-2014-0907 - SetUID/SetGID Programs Allow Privilege Escalation Via Insecure RPATH In IBM DB2

Vulnerability title: SetUID/SetGID Programs Allow Privilege Escalation Via Insecure RPATH In IBM DB2 CVE: CVE-2014-0907 Vendor: IBM Product: DB2 Affected version: V9.1, V9.5, V9.7, V10.1 and V10.5 Fixed version: V9.7 FP9a, V10.1 FP3a, V10.1 FP4 and V10.5 FP3a Reported by: Tim Brown Details: It ha...

CVE-2013-6744

The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote authenticated users to gain privileges by leveraging the CONNECT privilege and the CREATEEXTERNALROUTINE authority...

CVE-2014-0907

Multiple untrusted search path vulnerabilities in unspecified 1 setuid and 2 setgid programs in IBM DB2 9.5, 9.7 before FP9a, 9.8, 10.1 before FP3a, and 10.5 before FP3a on Linux and UNIX allow local users to gain root privileges via a Trojan horse library...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in unspecified 1 setuid and 2 setgid programs in IBM DB2 9.5, 9.7 before FP9a, 9.8, 10.1 before FP3a, and 10.5 before FP3a on Linux and UNIX allow local users to gain root privileges via a Trojan horse library...

Design/Logic Flaw

The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote authenticated users to gain privileges by leveraging the CONNECT privilege and the CREATEEXTERNALROUTINE authority...