CVE-2012-2197

Stack-based buffer overflow in the Java Stored Procedure infrastructure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote authenticated users to execute arbitrary code by leveraging certain CONNECT and EXECUTE privileges...

Code injection

IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to read arbitrary XML files via the 1 GETWRAPCFGC or 2 GETWRAPCFGC2 stored procedure...

CVE-2012-2196

IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to read arbitrary XML files via the 1 GETWRAPCFGC or 2 GETWRAPCFGC2 stored procedure...

CVE-2012-2197

Stack-based buffer overflow in the Java Stored Procedure infrastructure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote authenticated users to execute arbitrary code by leveraging certain CONNECT and EXECUTE privileges...

CVE-2012-2197

CVE-2012-2197 affects IBM DB2 Java Stored Procedure infrastructure across multiple DB2 releases (9.1 before FP12, 9.5–FP9, 9.7–FP6, 9.8–FP5, 10.1). The vulnerability is a stack-based buffer overflow that could allow remote authenticated execution of arbitrary code by exploiting CONNECT and EXECUT...

CVE-2012-2196

CVE-2012-2196 affects IBM DB2 LUW 9.1 (before FP12), 9.5 (through FP9), 9.7 (through FP6), 9.8 (through FP5), and 10.1 (through FP1). Affected routines GET_WRAP_CFG_C and GET_WRAP_CFG_C2 allow an authenticated user, without proper authority, to read XML files accessible to the DB2 fenced ID. Impa...

CVE-2012-2194

Directory traversal vulnerability in the SQLJ.DB2INSTALLJAR stored procedure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to replace JAR files via unspecified vectors...

CVE-2012-2194

CVE-2012-2194 : IBM DB2 stores vulnerability in the SQLJ.DB2_INSTALL_JAR stored procedure on Windows. Affected: DB2 9.1 (pre FP12), 9.5 (pre FP9), 9.7 (pre FP6), 9.8 (pre FP5), 10.1. Description: directory traversal allows a remote attacker with valid DB2 credentials to overwrite JAR files by cal...

IBM DB2 9.1 < Fix Pack 12 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.1 running on the remote host is affected by one or more of the following issues : - An integer signedness error exists in the 'db2asrrm' process that can lead to a heap-based buffer overflow. Note that this issue does not affect Windows host...

Authentication Capture: DRDA (DB2, Informix, Derby)

This module provides a fake DRDA DB2, Informix, Derby server that is designed to capture authentication credentials. -- coding: binary -- This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...

IBM DB2 9.7 < Fix Pack 6 Multiple Vulnerabilities

According to its version, the installation of DB2 9.7 running on the remote host is prior to Fix Pack 6. It is, therefore, affected by multiple vulnerabilities : - A local user can exploit a vulnerability in the bundled IBM Tivoli Monitoring Agent ITMA to escalate their privileges. CVE-2011-4061 ...

IBM DB2 9.8 < Fix Pack 5 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.8 running on the remote host is prior to Fix Pack 5. It is, therefore, affected by multiple vulnerabilities : - An authorized user with 'CONNECT' privileges from 'PUBLIC' can cause a denial of service via unspecified methods related to DB2's...

IBM DB2 9.1 < Fix Pack 11 Multiple DoS

According to its version, the installation of IBM DB2 9.1 running on the remote host is prior to Fix Pack 11. It is, therefore, affected by multiple denial of service vulnerabilities : - The version of Java that is bundled with the application can enter an infinite loop when handling certain...

CVE-2012-2180

The chaining functionality in the Distributed Relational Database Architecture DRDA module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service NULL pointer dereference, and resource consumption or daemon crash via a crafted request...

Null pointer dereference

The chaining functionality in the Distributed Relational Database Architecture DRDA module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service NULL pointer dereference, and resource consumption or daemon crash via a crafted request...

CVE-2012-2180

The chaining functionality in the Distributed Relational Database Architecture DRDA module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service NULL pointer dereference, and resource consumption or daemon crash via a crafted request...

CVE-2012-2180

The chaining functionality in the Distributed Relational Database Architecture DRDA module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service NULL pointer dereference, and resource consumption or daemon crash via a crafted request...

CVE-2012-2180

CVE-2012-2180 concerns IBM DB2 DRDA chaining, where a crafted DRDA request can trigger a denial of service. The vulnerability exists in the DRDA module handling DRDA chaining on DB2 9.7 (GA through FP5) and 9.8 (GA through FP4/FP5 as per bulletin) and can cause a NULL pointer dereference, leading...

IBM DB2 9.x 多个安全漏洞

IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。 IBM DB2 9.7 Fix Pack 6 FP6之前版本在实现上存在多个安全漏洞，可被恶意本地用户利用操作某些数据、获取提升权限、绕过某些安全限制、造成拒绝服务。 1） 附带版本的IBM Tivoli Monitoring Agent ITMA中存在错误，可被本地用户利用提升权限。 2） DB2 Administration Server DAS中的错误可被已验证用户利用提升其权限。 3）...

Fedora Update for gallery2 FEDORA-2012-5814

Check for the Version of gallery2 OpenVAS Vulnerability Test Fedora Update for gallery2 FEDORA-2012-5814 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...