5585 matches found
CVE-2012-0712
CVE-2012-0712 affects IBM DB2 XML Feature in DB2 9.5 (before FP9), 9.7 (through FP5), and 9.8 (through FP4). The flaw allows a remote authenticated user to cause a denial of service (infinite loop) by invoking XMLPARSE with a crafted string expression. IBM’s bulletin notes the vulnerability requi...
CVE-2012-1797
CVE-2012-1797 affects IBM DB2 9.5 where the file nodes.reg is created with world-writable permissions. The OpenVAS entry notes a permission weakness in IBM DB2 that is addressed by a vendor fix (Fix Pack 9). No explicit exploitation details or impact are provided beyond the permission issue; CVSS...
CVE-2012-1796
CVE-2012-1796 affects IBM DB2 9.5 environments using the Tivoli Monitoring Agent (ITMA). The connected records indicate a Linux/UNIX local privilege escalation via ITMA within DB2 9.5 before FP9. The NVD entry describes an unspecified local vulnerability in ITMA that enables privilege gains with ...
CVE-2012-0710
IBM DB2 DRDA vulnerability CVE-2012-0710 enables remote attackers to crash the database server via a crafted DRDA request. Affected releases include DB2 9.1 before FP11, 9.5 before FP9, 9.7 before FP5, and 9.8 before FP4 across multiple platforms. IBM’s Security Bulletin and related records confi...
CVE-2012-1796
Unspecified vulnerability in IBM Tivoli Monitoring Agent ITMA, as used in IBM DB2 9.5 before FP9 on UNIX, allows local users to gain privileges via unknown vectors...
CVE-2012-0709
IBM DB2 for Linux, UNIX and Windows is affected by CVE-2012-0709. A remote authenticated user can bypass viewing restrictions on table data by exploiting CREATEIN privileges to execute crafted CREATE VARIABLE statements. Affected: DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4. Root cau...
CVE-2012-1797
IBM DB2 9.5 uses world-writable permissions for nodes.reg, which has unspecified impact and attack vectors...
PT-2012-2806
Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.1 through 9.1 FP11 IBM DB2 versions 9.5 through 9.5 FP8 IBM DB2 versions 9.7 through 9.7 FP5 Description The issue is related to an integer signedness error in the db2dasrrm process within the DB2 Administration Server DAS o...
PT-2012-2807
Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.5 before FP9 IBM DB2 versions 9.7 through FP5 IBM DB2 versions 9.8 through FP4 Description The issue allows remote authenticated users to cause a denial of service, resulting in an infinite loop, by calling the XMLPARSE...
CVE-2012-0712: Undefined Security Weakness
The XML feature in IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 allows remote authenticated users to cause a denial of service infinite loop by calling the XMLPARSE function with a crafted string expression...
CVE-2012-1797: Undefined Security Weakness
IBM DB2 9.5 uses world-writable permissions for nodes.reg, which has unspecified impact and attack vectors...
CVE-2012-1796: Undefined Security Weakness
Unspecified vulnerability in IBM Tivoli Monitoring Agent ITMA, as used in IBM DB2 9.5 before FP9 on UNIX, allows local users to gain privileges via unknown vectors...
PT-2012-2804
Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 Description The issue allows remote authenticated users to bypass intended restrictions on viewing table data. This is achieved by leveraging the CREATEIN privilege to execu...
PT-2012-2805
Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.1 before FP11 IBM DB2 versions 9.5 before FP9 IBM DB2 versions 9.7 before FP5 IBM DB2 versions 9.8 before FP4 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sendin...
PT-2012-3544
Name of the Vulnerable Software and Affected Versions IBM DB2 versions prior to 9.5 FP9 Description The issue allows local users to gain privileges via unknown vectors. Recommendations For IBM DB2 version 9.5, update to at least FP9 to resolve the issue...
PT-2012-3545
Name of the Vulnerable Software and Affected Versions IBM DB2 version 9.5 Description The issue is related to world-writable permissions for nodes.reg, which has unspecified impact and attack vectors. Recommendations For IBM DB2 version 9.5, change the permissions of nodes.reg to prevent...
CVE-2012-0711: Undefined Security Weakness
Integer signedness error in the db2dasrrm process in the DB2 Administration Server DAS in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow...
CVE-2012-0710: Improper Input Validation
IBM DB2 9.1 before FP11, 9.5 before FP9, 9.7 before FP5, and 9.8 before FP4 allows remote attackers to cause a denial of service daemon crash via a crafted Distributed Relational Database Architecture DRDA request...
CVE-2012-0709: Improper Input Validation
IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 does not properly check variables, which allows remote authenticated users to bypass intended restrictions on viewing table data by leveraging the CREATEIN privilege to execute crafted SQL CREATE VARIABLE statements...
