Null pointer dereference

The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not validate an unspecified pointer, which allows attackers to overwrite "external memory" via unknown vectors, related to a missing "check for null pointers."...

CVE-2009-4332

db2pd in the Problem Determination component in IBM DB2 9.1 before FP7 and 9.5 before FP5 allows attackers to cause a denial of service NULL pointer dereference and application termination via unspecified vectors...

CVE-2009-4333

The Relational Data Services component in IBM DB2 9.5 before FP5 allows attackers to obtain the password argument from the SET ENCRYPTION PASSWORD statement via vectors involving the GET SNAPSHOT FOR DYNAMIC SQL command...

CVE-2009-4331

The Install component in IBM DB2 9.5 before FP5 and 9.7 before FP1 configures the High Availability HA scripts with incorrect file-permission and authorization settings, which has unknown impact and local attack vectors...

CVE-2009-4334

The Self Tuning Memory Manager STMM component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 uses 0666 permissions for the STMM log file, which allows local users to cause a denial of service or have unspecified other impact by writing to this file...

CVE-2009-4330

Unspecified vulnerability in db2licm in the Engine Utilities component in IBM DB2 9.5 before FP5 has unknown impact and local attack vectors...

CVE-2009-4335

Multiple unspecified vulnerabilities in bundled stored procedures in the Spatial Extender component in IBM DB2 9.5 before FP5 have unknown impact and remote attack vectors, related to "remote exploits."...

CVE-2009-4333

CVE-2009-4333 affects IBM DB2 9.5 before FP5 in the Relational Data Services component. The vulnerability allows an attacker to obtain the password argument from the SET ENCRYPTION PASSWORD statement via GET SNAPSHOT FOR DYNAMIC SQL, exposing confidential information. Affects DB2 9.5 prior to FP5...

CVE-2009-4332

db2pd in the Problem Determination component in IBM DB2 9.1 before FP7 and 9.5 before FP5 allows attackers to cause a denial of service NULL pointer dereference and application termination via unspecified vectors...

CVE-2009-4333

The Relational Data Services component in IBM DB2 9.5 before FP5 allows attackers to obtain the password argument from the SET ENCRYPTION PASSWORD statement via vectors involving the GET SNAPSHOT FOR DYNAMIC SQL command...

CVE-2009-4326

The CVE-2009-4326 issue affects IBM DB2 9.5 before FP5 and 9.7 before FP1 when the Database Partitioning Feature (DPF) is used. The RAND scalar function in the Common Code Infrastructure can produce repeating values, which may allow an attacker to predict randomness and defeat protection mechanis...

CVE-2009-4332

CVE-2009-4332 affects IBM DB2: db2pd in the Problem Determination component is vulnerable to a denial of service caused by a NULL pointer dereference. Affected products/versions include IBM DB2 9.1 before FP7 and 9.5 before FP5. The issue can trigger via unspecified vectors and results in applica...

CVE-2009-4327

CVE-2009-4327 affects IBM DB2 (Common Code Infrastructure), specifically in DB2 9.5 before FP5 and 9.7 before FP1. The flaw is improper validation of the memory pool size during creation, allowing a denial of service via memory consumption. Exploitation details are not provided in the documents; ...

CVE-2009-4329

Unspecified vulnerability in the Engine Utilities component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service segmentation fault by modifying the db2ra data stream sent in a request from the Load Utility...

CVE-2009-4328

CVE-2009-4328 concerns IBM DB2 UDB 9.5 before Fix Pack 5, where an unspecified issue in the DRDA Services component allows remote authenticated users to trigger a denial of service (server trap) by calling a SQL stored procedure under certain conditions. The impact is a partial availability degra...

CVE-2009-4330

Unspecified vulnerability in db2licm in the Engine Utilities component in IBM DB2 9.5 before FP5 has unknown impact and local attack vectors...

CVE-2009-4334

The Self Tuning Memory Manager STMM component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 uses 0666 permissions for the STMM log file, which allows local users to cause a denial of service or have unspecified other impact by writing to this file...

CVE-2009-4325

The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not validate an unspecified pointer, which allows attackers to overwrite "external memory" via unknown vectors, related to a missing "check for null pointers."...

CVE-2009-4329

CVE-2009-4329 affects IBM DB2 9.5 before FP5, specifically the Engine Utilities component. Remote authenticated users can cause a denial of service (segmentation fault) by modifying the db2ra data stream in a request from the Load Utility. Connected sources from Red Hat and NVD echo the same desc...

CVE-2009-4335

CVE-2009-4335 concerns multiple unspecified vulnerabilities in the bundled stored procedures of the Spatial Extender component in IBM DB2 9.5 prior to Fix Pack 5. The available sources indicate potential remote exposure with unknown impact, but explicit exploit details are not provided in the doc...