4412 matches found
CVE-2005-4867
IBM DB2 8.1 exposes a stack-based buffer overflow in the SATENCRYPT function when Satellite Administration (SATADMIN) is enabled. An attacker can trigger code execution remotely by sending a crafted long parameter. The issue is tied to a buffer overflow in SATENCRYPT; no remediation or patch deta...
CVE-2005-4866
CVE-2005-4866 describes a stack-based buffer overflow in IBM DB2 8.1’s JDBC Applet Server. The vulnerability can be triggered remotely by an attacker who connects, sends a very long username, disconnects, then reconnects and sends a shorter username with an unexpected db2java.zip version, which r...
CVE-2005-4863
Stack-based buffer overflow in db2fmp in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long parameter...
CVE-2005-4867
Stack-based buffer overflow in the SATENCRYPT function in IBM DB2 8.1, when Satellite Administration SATADMIN is enabled, allows remote attackers to execute arbitrary code via a long parameter...
CVE-2005-4864
CVE-2005-4864 describes a stack-based buffer overflow in IBM DB2 UDB 7.x and 8.1, triggered by a long DB2LPORT environment variable in the libdb2.so library. This vulnerability allows local users to execute arbitrary code with the privileges of the running DB2 process. Affected product/version: I...
CVE-2005-4868
Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, which allows local users to gain unauthorized access, gain sensitive information, such as cleartext passwords, and cause a denial of service...
CVE-2005-4869
The CVE-2005-4869 entry affects IBM DB2 8.1, where the (1) to_char and (2) to_date functions can be exploited by an empty string in the second parameter to trigger a local denial of service (application crash) via a null pointer dereference. The vulnerability is triggered locally, and the cited d...
CVE-2005-4871
IBM DB2 8.1 contains a vulnerability where certain XML functions run with the DB2 process privileges instead of the logged-in user, enabling a remote attacker to create or overwrite files via XMLFileFromVarchar or XMLFileFromClob, or to read files via XMLVarcharFromFile or XMLClobFromFile. The NV...
CVE-2005-4863
CVE-2005-4863 describes a stack-based buffer overflow in IBM DB2’s db2fmp component, enabling local users to execute arbitrary code via a long parameter. Affected products include IBM DB2 Universal Database 7.x and 8.x (DB2 8.1). Root cause is a buffer overflow in db2fmp; impact is arbitrary code...
CVE-2007-5090
Unspecified vulnerability in IBM Rational ClearQuest CQ, when a Microsoft SQL Server or an IBM DB2 database is used, allows attackers to corrupt data via unspecified vectors...
Code injection
Unspecified vulnerability in IBM Rational ClearQuest CQ, when a Microsoft SQL Server or an IBM DB2 database is used, allows attackers to corrupt data via unspecified vectors...
CVE-2007-5090
Unspecified vulnerability in IBM Rational ClearQuest CQ, when a Microsoft SQL Server or an IBM DB2 database is used, allows attackers to corrupt data via unspecified vectors...
CVE-2007-5090
CVE-2007-5090 : IBM Rational ClearQuest contains an unspecified vulnerability that, when using Microsoft SQL Server or IBM DB2, could allow a local attacker to manipulate data. The connected IBM/DB2 bulletin confirms exposure in CQ and notes a low (1.2) CVSS base score with local access; no mitig...
PT-2007-6187 · Microsoft +1 · Sql Server +2
Name of the Vulnerable Software and Affected Versions: IBM Rational ClearQuest CQ affected versions not specified Description: The issue allows attackers to corrupt data via unspecified vectors when a Microsoft SQL Server or an IBM DB2 database is used. Recommendations: At the moment, there is no...
IBM DB2 buffer overflow
Buffer overflow in sysproc.authlistgroupsforauthid function...
IBM DB2 < 9 Fix Pack 3 / 8 Fix Pack 15 Multiple Vulnerabilities
According to its version, the installation of IBM DB2 running on the remote host is affected by one or more of the following issues : - A local user may be able to overwrite arbitrary files, create arbitrary world-writeable directories, or gain root privileges via symlink attacks or specially...
IBM DB2 Universal Database多个本地安全漏洞
BUGTRAQ ID: 25339 CVECAN ID: CVE-2007-4270,CVE-2007-4271,CVE-2007-4272,CVE-2007-4273,CVE-2007-4275,CVE-2007-4276 IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。 IBM DB2的多个工具实现上存在漏洞，本地攻击者可能利用这些漏洞提升自己的权限。 IBM...
CVE-2007-4417
IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 does not properly revoke privileges on methods, which allows remote authenticated users to execute a method after revocation until the routine auth cache is flushed...
CVE-2007-4271
Directory traversal vulnerability in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary files via a .. dot dot in an unspecified environment variable, which is appended to "/tmp/" and used as a log file. NOTE: this issue might be related to symlink...