4509 matches found
IBM DB2 JDBC DoS
jdbcReadString read behind memory...
[SECURITY] Fedora 11 Update: rubygem-rails-2.3.2-5.fc11
Rails is a framework for building web-application using CGI, FCGI, modruby, or WEBrick on top of either MySQL, PostgreSQL, SQLite, DB2, SQL Server, or Oracle with eRuby- or Builder-based templates...
IBM Db2 Unspecified Vulnerability - Windows
IBM Db2 is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IBM Db2 Unspecified Vulnerability - Linux
IBM Db2 is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2"; ifdescription...
IBM DB2 9.1 < Fix Pack 8 Multiple Vulnerabilities
According to its version, the IBM DB2 server running on the remote host is prior to 9.1 Fix Pack 8. It is, therefore, affected by multiple vulnerabilities : - MODIFIED SQL DATA table function is not dropped even if the maintainer does not have privileges to maintain the objects. IZ46773 - It may ...
IBM DB2 Unspecified Vulnerability (Windows)
The host is installed with IBM DB2 and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbibmdb2unspesifiedvulnwin.nasl 4869 2016-12-29 11:01:45Z teissa $ IBM DB2 Unspecified Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH,...
IBM DB2 Unspecified Vulnerability (Linux)
The host is installed with IBM DB2 and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbibmdb2unspesifiedvulnlin.nasl 7113 2017-09-13 06:03:30Z cfischer $ IBM DB2 Unspecified Vulnerability Linux Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH,...
IBM Db2 Multiple Vulnerabilities (Oct 2009) - Linux
IBM DB2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2"; ifdescription...
IBM DB2 Multiple Vulnerabilities - Oct09 (Linux)
The host is installed with IBM DB2 and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmdb2multvulnlinoct09.nasl 7113 2017-09-13 06:03:30Z cfischer $ IBM DB2 Multiple Vulnerabilities - Oct09 Linux Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH,...
IBM DB2 Multiple Vulnerabilities - Oct09 (Windows)
The host is installed with IBM DB2 and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmdb2multvulnwinoct09.nasl 7113 2017-09-13 06:03:30Z cfischer $ IBM DB2 Multiple Vulnerabilities - Oct09 Windows Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH...
IBM Db2 Multiple Vulnerabilities (Oct 2009) - Windows
IBM Db2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE 10 Security Update : bytefx-data-mysql (bytefx-data-mysql-6365)
The XML signature checker did not impose limits on the minimum length of HMAC signatures in XML documents. Attackers could therefore specify a length of e.g. 1 to make the signature appear valid and therefore effectively bypass verification of XML documents. %NASLMINLEVEL 70300 C Tenable Network...
Design/Logic Flaw
IBM DB2 8 before FP18, 9.1 before FP8, and 9.5 before FP4 allows remote authenticated users to bypass intended access restrictions, and update, insert, or delete table rows, via unspecified vectors...
CVE-2009-3472
IBM DB2 8 before FP18, 9.1 before FP8, and 9.5 before FP4 allows remote authenticated users to bypass intended access restrictions, and update, insert, or delete table rows, via unspecified vectors...
Authorization
IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which has unspecified impact and remote attack vectors...
Design/Logic Flaw
IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP2 does not perform the expected drops of certain table functions upon a loss of privileges by the functions' definers, which has unspecified impact and remote attack vectors...
CVE-2009-3473
IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which has unspecified impact and remote attack vectors...
CVE-2009-3471
IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP2 does not perform the expected drops of certain table functions upon a loss of privileges by the functions' definers, which has unspecified impact and remote attack vectors...
CVE-2009-3473
IBM DB2 9.1 prior to Fix Pack 8 is affected by CVE-2009-3473, where a user can execute SET SESSION AUTHORIZATION without the SETSESSIONUSER privilege. The NVD description notes unspecified impact and remote attack vectors; OpenVAS/Nessus references also describe an unspecified vulnerability in th...