IBM DB2 < 9 Fix Pack 4 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 running on the remote host is affected by one or more of the following issues : - The 'db2dart' tool executes the 'tput' command which effectively allows a malicious user to run commands as the DB2 instance owner IZ03646. - 'db2watch' and...

openSUSE 10 Security Update : bytefx-data-mysql (bytefx-data-mysql-4597)

This update fixes a buffer overflow in Mono's BigInteger implementation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update bytefx-data-mysql-4597. The text description of this plugin is C SUSE...

Memory corruption

IBM DB2 UDB 9.1 before Fixpak 4 does not properly manage storage of a list containing authentication information, which might allow attackers to cause a denial of service instance crash or trigger memory corruption. NOTE: the vendor description of this issue is too vague to be certain that it is...

CVE-2007-5652

IBM DB2 UDB 9.1 before Fixpak 4 does not properly manage storage of a list containing authentication information, which might allow attackers to cause a denial of service instance crash or trigger memory corruption. NOTE: the vendor description of this issue is too vague to be certain that it is...

CVE-2007-5652

CVE-2007-5652 affects IBM DB2 UDB 9.1 before Fixpak 4. The issue concerns improper management of storage of a list containing authentication information, which could allow a denial of service (instance crash) or memory corruption. The vendor description notes uncertainty about whether this is sec...

CVE-2007-5652

IBM DB2 UDB 9.1 before Fixpak 4 does not properly manage storage of a list containing authentication information, which might allow attackers to cause a denial of service instance crash or trigger memory corruption. NOTE: the vendor description of this issue is too vague to be certain that it is...

openSUSE 10 Security Update : mono-core (mono-core-2373)

By appending spaces to URLs and attackers could download the source code of scripts that normally get executed by the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mono-core-2373...

IBM DB2数据库缓冲区溢出及拒绝服务漏洞

BUGTRAQ ID: 26010 CVECAN ID: CVE-2007-5324 IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。 DB2的DB2JDS服务处理畸形请求数据时存在多个缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器或导致拒绝服务。 DB2的DB2JDS服务监听于TCP 6789端口。由于内部的sprintf调用没有正确地处理特制报文，因此如果向该服务发送了恶意报文就可以触发栈溢出，导致执行任意指令。...

IBM DB2 < 8 Fix Pack 15 / 9.x < 9 Fix Pack 3 Multiple Vulnerabilities

Binary data 4239.prm...

CVE-2005-4864

Stack-based buffer overflow in libdb2.so in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long DB2LPORT environment variable...

CVE-2005-4866

Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminato...

CVE-2005-4871

Certain XML functions in IBM DB2 8.1 run with the privileges of DB2 instead of the logged-in user, which allows remote attackers to create or overwrite files via 1 XMLFileFromVarchar or 2 XMLFileFromClob, or read files via 3 XMLVarcharFromFile or 4 XMLClobFromFile...

CVE-2005-4870

Stack-based buffer overflows in the 1 xmlvarcharfromfile, 2 xmlclobfromfile, 3 xmlfilefromvarchar, and 4 xmlfilefromclob function calls in IBM DB2 8.1 allow remote attackers to execute arbitrary code via a 94-byte second argument, which causes the return address to be overwritten with a pointer t...

CVE-2005-4870

CVE-2005-4870 describes stack-based buffer overflows in IBM DB2 8.1 affecting four XML-related functions (xmlvarcharfromfile, xmlclobfromfile, xmlfilefromvarchar, xmlfilefromclob). The overflow is triggered by a 94-byte second argument, leading to overwriting the return address to a pointer withi...

CVE-2005-4868

The CVE-2005-4868 entry affects IBM DB2 8.1. Shared memory sections and events have default read/write permissions for the Everyone group, enabling local users to gain unauthorized access and potentially view sensitive data (e.g., cleartext passwords) and cause a denial of service. Exploitation i...

CVE-2005-4869

The 1 tochar and 2 todate function in IBM DB2 8.1 allows local users to cause a denial of service application crash via an empty string in the second parameter, which causes a null pointer dereference...

CVE-2005-4865

Stack-based buffer overflow in call in IBM DB2 7.x and 8.1 allows remote attackers to execute arbitrary code via a long libname...

CVE-2005-4864

CVE-2005-4864 describes a stack-based buffer overflow in IBM DB2 UDB 7.x and 8.1, triggered by a long DB2LPORT environment variable in the libdb2.so library. This vulnerability allows local users to execute arbitrary code with the privileges of the running DB2 process. Affected product/version: I...

CVE-2005-4866

CVE-2005-4866 describes a stack-based buffer overflow in IBM DB2 8.1’s JDBC Applet Server. The vulnerability can be triggered remotely by an attacker who connects, sends a very long username, disconnects, then reconnects and sends a shorter username with an unexpected db2java.zip version, which r...

CVE-2005-4865

CVE-2005-4865 describes a stack-based buffer overflow in the IBM DB2 client/server call path that can be triggered by a long libname, affecting IBM DB2 Universal Database 7.x and 8.x (specifically 8.1 in some records). The vulnerability allows remote code execution and is rated high by NVD, with ...