PT-2012-3874

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.1 before FP12 IBM DB2 versions 9.5 through FP9 IBM DB2 versions 9.7 through FP6 IBM DB2 versions 9.8 through FP5 IBM DB2 versions 10.1 Description The issue is related to a stack-based buffer overflow in the Java Stored...

PT-2012-3873

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.1 before FP12 IBM DB2 versions 9.5 through FP9 IBM DB2 versions 9.7 through FP6 IBM DB2 versions 9.8 through FP5 IBM DB2 versions 10.1 Description The issue allows remote attackers to read arbitrary XML files. This is achiev...

PT-2012-3872

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.1 before FP12 IBM DB2 versions 9.5 through FP9 IBM DB2 versions 9.7 through FP6 IBM DB2 versions 9.8 through FP5 IBM DB2 versions 10.1 Description A directory traversal issue exists in the SQLJ.DB2 INSTALL JAR stored...

CVE-2012-2197: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Java Stored Procedure infrastructure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote authenticated users to execute arbitrary code by leveraging certain CONNECT and EXECUTE privileges...

CVE-2012-2196: Exposure of Sensitive Information to an Unauthorized Actor

IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to read arbitrary XML files via the 1 GETWRAPCFGC or 2 GETWRAPCFGC2 stored procedure...

CVE-2012-2194: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the SQLJ.DB2INSTALLJAR stored procedure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to replace JAR files via unspecified vectors...

IBM DB2 9.1 < Fix Pack 12 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.1 running on the remote host is affected by one or more of the following issues : - An integer signedness error exists in the 'db2asrrm' process that can lead to a heap-based buffer overflow. Note that this issue does not affect Windows host...

Authentication Capture: DRDA (DB2, Informix, Derby)

This module provides a fake DRDA DB2, Informix, Derby server that is designed to capture authentication credentials. -- coding: binary -- This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...

IBM DB2 9.7 < Fix Pack 6 Multiple Vulnerabilities

According to its version, the installation of DB2 9.7 running on the remote host is prior to Fix Pack 6. It is, therefore, affected by multiple vulnerabilities : - A local user can exploit a vulnerability in the bundled IBM Tivoli Monitoring Agent ITMA to escalate their privileges. CVE-2011-4061 ...

IBM DB2 9.8 < Fix Pack 5 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.8 running on the remote host is prior to Fix Pack 5. It is, therefore, affected by multiple vulnerabilities : - An authorized user with 'CONNECT' privileges from 'PUBLIC' can cause a denial of service via unspecified methods related to DB2's...

IBM DB2 9.1 < Fix Pack 11 Multiple DoS

According to its version, the installation of IBM DB2 9.1 running on the remote host is prior to Fix Pack 11. It is, therefore, affected by multiple denial of service vulnerabilities : - The version of Java that is bundled with the application can enter an infinite loop when handling certain...

CVE-2012-2180

The chaining functionality in the Distributed Relational Database Architecture DRDA module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service NULL pointer dereference, and resource consumption or daemon crash via a crafted request...

CVE-2012-2180

The chaining functionality in the Distributed Relational Database Architecture DRDA module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service NULL pointer dereference, and resource consumption or daemon crash via a crafted request...

Null pointer dereference

The chaining functionality in the Distributed Relational Database Architecture DRDA module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service NULL pointer dereference, and resource consumption or daemon crash via a crafted request...

CVE-2012-2180

CVE-2012-2180 concerns IBM DB2 DRDA chaining, where a crafted DRDA request can trigger a denial of service. The vulnerability exists in the DRDA module handling DRDA chaining on DB2 9.7 (GA through FP5) and 9.8 (GA through FP4/FP5 as per bulletin) and can cause a NULL pointer dereference, leading...

CVE-2012-2180

The chaining functionality in the Distributed Relational Database Architecture DRDA module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service NULL pointer dereference, and resource consumption or daemon crash via a crafted request...

PT-2012-3861

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.7 before FP6 IBM DB2 versions 9.8 before FP5 Description The issue in the Distributed Relational Database Architecture DRDA module allows remote attackers to cause a denial of service. This can result in a NULL pointer...

CVE-2012-2180: Undefined Security Weakness

The chaining functionality in the Distributed Relational Database Architecture DRDA module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service NULL pointer dereference, and resource consumption or daemon crash via a crafted request...

IBM DB2 9.x 多个安全漏洞

IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。 IBM DB2 9.7 Fix Pack 6 FP6之前版本在实现上存在多个安全漏洞，可被恶意本地用户利用操作某些数据、获取提升权限、绕过某些安全限制、造成拒绝服务。 1） 附带版本的IBM Tivoli Monitoring Agent ITMA中存在错误，可被本地用户利用提升权限。 2） DB2 Administration Server DAS中的错误可被已验证用户利用提升其权限。 3）...

Fedora Update for gallery2 FEDORA-2012-5814

Check for the Version of gallery2 OpenVAS Vulnerability Test Fedora Update for gallery2 FEDORA-2012-5814 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...