4412 matches found
CVE-2008-0699
Unspecified vulnerability in the ADMINSPC procedure SYSPROC.ADMINSPC in IBM DB2 UDB before 8.2 Fixpak 16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unspecified attack vectors...
CVE-2008-0698
Buffer overflow in the DAS server in IBM DB2 UDB before 8.2 Fixpak 16 has unknown attack vectors, and an impact probably involving "invalid memory access."...
Design/Logic Flaw
Unspecified vulnerability in DB2PD in IBM DB2 UDB before 8.2 Fixpak 16 allows local users to gain root privileges via unspecified vectors...
Buffer overflow
Buffer overflow in the DAS server in IBM DB2 UDB before 8.2 Fixpak 16 has unknown attack vectors, and an impact probably involving "invalid memory access."...
Authorization
IBM DB2 UDB before 8.2 Fixpak 16 does not properly check authorization for the ALTER TABLE statement, which has unknown impact and attack vectors...
Code injection
Unspecified vulnerability in the ADMINSPC procedure SYSPROC.ADMINSPC in IBM DB2 UDB before 8.2 Fixpak 16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unspecified attack vectors...
CVE-2008-0696
IBM DB2 UDB before 8.2 Fixpak 16 does not properly check authorization for the ALTER TABLE statement, which has unknown impact and attack vectors...
CVE-2008-0699
Unspecified vulnerability in the ADMINSPC procedure SYSPROC.ADMINSPC in IBM DB2 UDB before 8.2 Fixpak 16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unspecified attack vectors...
CVE-2008-0698
CVE-2008-0698 : IBM DB2 UDB DAS server has a buffer overflow in the DAS component prior to 8.2 Fixpak 16. This memory corruption likely stems from modified pointer values in remote administration requests and may enable denial of service or arbitrary code execution, per related Red Hat and NVD en...
CVE-2008-0698
Buffer overflow in the DAS server in IBM DB2 UDB before 8.2 Fixpak 16 has unknown attack vectors, and an impact probably involving "invalid memory access."...
CVE-2008-0697
Technical details about CVE-2008-0697 are not publicly available in the provided documents. The records only indicate an unspecified local privilege escalation in IBM DB2 UDB prior to 8.2 Fixpak 16. Monitor for vendor advisories and updated security reports.
CVE-2008-0697
Unspecified vulnerability in DB2PD in IBM DB2 UDB before 8.2 Fixpak 16 allows local users to gain root privileges via unspecified vectors...
CVE-2008-0699
The CVE-2008-0699 entry relates to an unspecified remote code execution vulnerability in IBM DB2 UDB via the ADMIN_SP_C procedure (SYSPROC.ADMIN_SP_C). Affected products/versions include IBM DB2 UDB before 8.2 Fixpak 16, 9.1 before FP4a, and 9.5 before FP1. The underlying issue is within the ADMI...
CVE-2008-0696
CVE-2008-0696 affects IBM DB2 UDB prior to 8.2 Fixpak 16, where the ALTER TABLE statement does not properly enforce authorization. The provided sources describe the issue but do not specify concrete impact, attack vectors, or affected subcomponents beyond the ALTER TABLE authorization check. No e...
iDefense Security Advisory 02.07.08: IBM DB2 Universal Database db2pd Arbitrary Library Loading Vulnerability
iDefense Security Advisory 02.07.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 07, 2008 I. BACKGROUND IBM Corp.'s DB2 Universal Database product is a large database server product commonly used for high end databases. For more information, visit the following URL...
IBM DB2 database server multiple security vulnerabilities
TCP/523 remote administration service memory corruption. Dynamic livrary loading by relative path...
iDefense Security Advisory 02.07.08: IBM DB2 Universal Database Administration Server Memory Corruption Vulnerability
iDefense Security Advisory 02.07.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 07, 2008 I. BACKGROUND IBM Corp.'s DB2 Universal Database product is a large database server product commonly used for high end databases. The DB2 Administration Server DAS provides functionality that...
IBM DB2 < 8.1 Fix Pack 16 Multiple Vulnerabilities
According to its version, the installation of IBM DB2 running on the remote host is affected by one or more of the following issues : - A local user may be able to gain root privileges using the 'db2pd' tool. IZ03546 - The 'b2dart' tool executes a TPUT command, which effectively allows users to r...
