IBM DB2 < 8.1 Fix Pack 14 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 running on the remote host may crash when processing specially crafted SQLJRA packets because it attempts to dereference a NULL pointer in the sqledb2raasrecvrequest function. A remote attacker can send such packets without authentication to...

IBM DB2 < 8.1 Fix Pack 13 CONNECT Processing Unspecified DoS

According to its version, the installation of IBM DB2 running on the remote host may crash in certain scenarios, such as when a user connects using a specially crafted ACCSEC command during the handshake process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc...

IBM DB2远程DQLJRA包拒绝服务漏洞

IBM DB2 Database Server是一款流行的数据库服务程序。 IBM DB2 Database Server sqledb2raasrecvrequest请求处理存在问题，远程攻击者可利用此漏洞对服务程序进行拒绝服务攻击。 当连接远程DB2实例，版本7客户端一般会发送一个SQLJRA包请求启动连接，不过一个特殊构建的SQLJRA包可引起DB2实例崩溃，在当引用一个NULL指针时sqledb2raasrecvrequest 来自DB2ENGN.DLL出现访问冲突错误。 IBM DB2 Universal Database Win98/NT/2000 7.0 IBM DB2...

CVE-2006-6638

IBM DB2 8.1 before FixPak 14 allows remote attackers to cause a denial of service via a crafted SQLJRA packet, which causes a NULL pointer dereference in the sqledb2raasrecvrequest function in DB2ENGN.DLL, a different issue than CVE-2006-4257...

CVE-2006-6638

IBM DB2 8.1 before FixPak 14 allows remote attackers to cause a denial of service via a crafted SQLJRA packet, which causes a NULL pointer dereference in the sqledb2raasrecvrequest function in DB2ENGN.DLL, a different issue than CVE-2006-4257...

CVE-2006-6638

CVE-2006-6638 affects IBM DB2 UDB 8.1 before FixPak 14. A remote attacker can trigger a denial of service by sending a crafted SQLJRA packet, leading to a NULL pointer dereference in the sqle_db2ra_as_recvrequest function in DB2ENGN.DLL. This is the same issue described in CVE-2006-4257 family bu...

IBM DB2 database server DoS

NULL pointer dereference on malformed SQLJRA packet...

IBM DB2 Remote DoS during CONNECT processing

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM DB2 Remote DoS during CONNECT processing AppSecInc Team SHATTER Security Advisory: http://www.appsecinc.com/resources/alerts/db2/2006-09-05.shtml Affected versions: All versions of IBM DB2 Database Server Risk level: Medium Credits: This...

IBM DB2 Universal Database 7.2 (db2licm) Local Exploit

No description provided by source. / Local Exploit for db2licm IBM db2 v 7.1 Linux/x86 vulnerability researched by Juan Manuel Pascual Escriba pask at uninet.edu / char sc= "\x31\xc0" / begin setuid 0 / "\x31\xdb" "\xb0\x17" "\xcd\x80" "\xeb\x1f" "\x5e" "\x89\x76\x08" "\x31\xc0" "\x88\x46\x07"...

IBM DB2多个拒绝服务漏洞

IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。 DB2的实现上存在多个拒绝服务漏洞，远程或本地攻击者可能导致服务器拒绝服务。 在创建到数据库的连接时客户端所使用的第一个消息是EXCSAT（消息代码0x1041）。这个消息中包含有名为MGRLVLLS（code 0x2114）的对象。当MGRLVLLS消息足够大（1Kb字节）时，就会触发缓冲区溢出。如果客户端在发送完这个消息后立即终止连接，就会导致终止服务进程。 如果LOAD命令中的REPLACE...

IBM DB2握手协议拒绝服务漏洞

IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。 IBM DB2处理认证操作的实现上存在漏洞，远程攻击者可能导致服务器拒绝服务。 通过用户口令认证创建到DB2...

IBM DB2 JDBC Applet Server Detection

The remote host is running an IBM DB2 JDBC Applet Server. DB2 is a commercial database from IBM, and the JDBC Applet Server is used by Java apps and applets to communicate with a DB2 server using the type 3 a.k.a 'net' driver. Note that use of this driver has been deprecated since DB2 V8.1. C...

IBM DB2 Connection Port Detection

The remote host is running IBM DB2 with an open connection port for a DB2 instance. IBM DB2 is a commercial database, and a connection port is used by remote clients when connecting to a DB2 server instance. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid22416;...

IBM DB2 Interrupt Port Detection

The remote host is running IBM DB2, with an open interrupt port for a DB2 instance. DB2 is an enterprise database solution, and an interrupt port is used to support requests from down-level clients. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

[Full-disclosure] Details for BID 19586 - DB2 UDB Vulnerability

DB2 UDB - Handshake Protocol DoS Attack BID 19586 Background DB2 Universal Database UDBtm is a popular database software package from IBM available for legacy platforms as well as open systems Unix and Windows. Clients use a protocol called DRDA to communicate with the DB2 UDB server. Protocol...

IBM DB2 database server DoS

Multiple DoS conditions in database server...

[Full-disclosure] Details for BID 18428

DB2 UDB - Unauthenticated Buffer Overflow and DoS BID 18428 Background DB2 Universal Database UDBtm is a popular database software package from IBM available for legacy platforms as well as open systems Unix and Windows. Clients use a protocol called DRDA to communicate with the DB2 UDB server...

CVE-2006-4257

IBM DB2 Universal Database UDB before 8.1 FixPak 13 allows remote authenticated users to cause a denial of service crash by 1 sending the first ACCSEC command without an RDBNAM parameter during the CONNECT process, or 2 sending crafted SQLJRA packet, which results in a null dereference...

CVE-2006-4257

IBM DB2 Universal Database UDB before 8.1 FixPak 13 allows remote authenticated users to cause a denial of service crash by 1 sending the first ACCSEC command without an RDBNAM parameter during the CONNECT process, or 2 sending crafted SQLJRA packet, which results in a null dereference...

CVE-2006-4257

CVE-2006-4257 affects IBM DB2 UDB prior to 8.1 FixPak 13. A remote authenticated attacker can cause a denial-of-service (crash) by (1) sending the first ACCSEC command without an RDBNAM parameter during the CONNECT process, or (2) sending a crafted SQLJRA packet, which results in a NULL dereferen...