CVE-2009-4330

IBM DB2 9.5 before FP5 is vulnerable in the Engine Utilities component (db2licm) with an unspecified impact and local attack vectors. Affected product/version: IBM DB2 UDB 9.5 prior to Fix Pack 5. Underlying issue: unspecified vulnerability in db2licm; CVSSv2 base 7.2 (LOCAL, HIGH). Remediation: ...

CVE-2009-4335

Multiple unspecified vulnerabilities in bundled stored procedures in the Spatial Extender component in IBM DB2 9.5 before FP5 have unknown impact and remote attack vectors, related to "remote exploits."...

CVE-2009-4326

The RAND scalar function in the Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1, when the Database Partitioning Feature DPF is used, produces "repeating" return values, which might allow attackers to defeat protection mechanisms based on randomization by predicti...

CVE-2009-4331

The Install component in IBM DB2 9.5 before FP5 and 9.7 before FP1 configures the High Availability HA scripts with incorrect file-permission and authorization settings, which has unknown impact and local attack vectors...

CVE-2009-4331

The CVE-2009-4331 issue affects IBM DB2 Install component in DB2 9.5 before FP5 and 9.7 before FP1. According to the provided sources, the Install component configures the High Availability (HA) scripts with incorrect file-permission and authorization settings. The material specifies the impact a...

CVE-2009-4325

CVE-2009-4325 affects IBM DB2 Client Interfaces: IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1; root cause is a missing null-pointer check that allows overwriting external memory via unspecified vectors. CVSS shows a medium impact (I/P, A/P) with network attack vecto...

CVE-2009-4334

The CVE-2009-4334 issue affects IBM DB2’s Self Tuning Memory Manager (STMM). The STMM log file is created with mode 0666 permissions in DB2 versions affected (9.1 before FP8, 9.5 before FP5, 9.7 before FP1), on both Windows and Linux, enabling local users to cause a denial of service by writing t...

CVE-2009-4328

Unspecified vulnerability in the DRDA Services component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service server trap by calling a SQL stored procedure in unknown circumstances...

IBM DB2 9.5 < Fix Pack 5 Multiple Unspecified Vulnerabilities

The IBM DB2 database server installed on the remote host is prior to 9.5 Fix Pack 5. It is, therefore, affected by multiple unspecified vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid43172;...

IBM DB2 9.5 < Fix Pack 5 Multiple Vulnerabilities

Binary data 5262.prm...

IBM DB2 Universal Database Multiple SQL Functions Remote Code Execution Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM DB2. Authentication is required to exploit this vulnerability. The specific flaw exists in the parsing of VARCHAR arguments to a number of stored procedures available by default on DB2...

IBM DB2 Multiple Vulnerabilities - Dec09 (Linux)

The host is installed with IBM DB2 and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmdb2multvulnlindec09.nasl 4869 2016-12-29 11:01:45Z teissa $ IBM DB2 Multiple Vulnerabilities - Dec09 Linux Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH,...

IBM Db2 Multiple Vulnerabilities (Dec 2009) - Linux

IBM Db2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2"; ifdescription...

Code injection

dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors...

CVE-2009-4150

dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors...

CVE-2009-4150

dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors...

CVE-2009-4150

CVE-2009-4150 describes a local vulnerability in IBM DB2 where the component/function dasauto can be exploited by unprivileged user accounts to achieve code execution on affected versions (DB2 8 before FP18; 9.1 before FP8; 9.5 before FP4; 9.7 before FP1). The impact is unspecified in the provide...

IBM DB2 Universal Database XML Query Buffer Overflow (CVE-2008-3854)

IBM DB2 Database is a relational database management system made available for Unix, Windows, and Linux platforms. The product consists of a set of services that work together to provide data processing functionalities. DB2 can be administrated from command-line tools or GUI tools. IBM DB2 runs...

IBM DB2 JDBC Applet Server远程拒绝服务漏洞

CVE ID：CVE-2009-2971 IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。 IBM DB2 JDBC Applet Server服务程序中的jdbcReadString函数存在一个安全漏洞，在转换UNICODE到ANSI字符的时候，没有判断报文中实际的字符串大小，而直接使用报文中的长度域。如果远程攻击者发送特殊构造的JDBC数据，无须认证即可导致JDBC Applet Server退出. IBM DB2 Universal Database...

NSFOCUS SA2009-02 : IBM DB2 JDBC Applet Server Remote DoS Vulnerability

NSFOCUS Security Advisory SA2009-02 IBM DB2 JDBC Applet Server Remote DoS Vulnerability Release Date: 2009-10-16 CVE ID: CVE-2009-2971 http://www.nsfocus.com/en/advisories/0902.html Affected system: ============== IBM DB2 Universal Database v8.1 Fixpak 15 v8.2 Fixpak 8 and lower versions IBM DB2...