IBM DB2 9.5 < 9.5 Fix Pack 9 Multiple Vulnerabilities

Binary data 6347.prm...

DB2 9.5 < Fix Pack 9 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.5 running on the remote host is prior to Fix Pack 9. It is, therefore, affected by the following vulnerabilities : - Incorrect, world-writable file permissions are in place for the file 'NODES.REG'. IC79518 - An unspecified error can allow...

Database Open Access Information Disclosure Vulnerability

Various Database server might be prone to an information disclosure vulnerability if accessible to remote systems. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

[SECURITY] Fedora 16 Update: WebCalendar-1.2.4-3.fc16

WebCalendar is a PHP-based calendar application that can be configured as a single-user calendar, a multi-user calendar for groups of users, or as an event calendar viewable by visitors. MySQL, PostgreSQL, Oracle, DB2, Interbase, MS SQL Server, or ODBC is required. WebCalendar can be setup in a...

DB2 Authentication Brute Force Utility

This module attempts to authenticate against a DB2 instance using username and password combinations indicated by the USERFILE, PASSFILE, and USERPASSFILE options. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework requi...

IBM DB2 / DB2 Connect Tivoli监视代理DT_RPATH特权提升漏洞

Bugtraq ID: 51181 CVE ID：CVE-2011-4061 IBM DB2 Universal Database Server是一款大型的商业关系数据库系统 IBM DB2/IBM DB2 Connect存在安全漏洞，允许恶意本地用户提升特权 Tivoli监视代理ITMA绑定的SUID "tmaitm6/lx8266/bin/kbbacf1"可执行文件不安全使用DTRPATH来装载libkbb.so库，本地攻击者可以利用此漏洞诱使目标用户在特制库所在目录运行应用程序，可装载任意库提升权限 0 DB2 Connect 9.x IBM DB2 9.x 厂商解决方案...

IBM DB2 9.7 < Fix Pack 5 Multiple Denial of Service Vulnerabilities

According to its version, the installation of IBM DB2 9.7 running on the remote host is prior to Fix Pack 5. It is, therefore, affected by multiple denial of service vulnerabilities : - On Unix and Unix-like systems with both the Self Tuning Memory Manager STMM feature enabled and the...

IBM DB2 9.7 < 9.7 Fix Pack 5 Local DoS

Binary data 6099.prm...

CVE-2011-4435

The web-server component in the Consolidation and Analysis Engine CAE Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not prevent directory browsing, which allows remote attackers to obtain sensitive information via HTTP requests...

Directory traversal

The web-server component in the Consolidation and Analysis Engine CAE Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not prevent directory browsing, which allows remote attackers to obtain sensitive information via HTTP requests...

CVE-2011-4435

The web-server component in the Consolidation and Analysis Engine CAE Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not prevent directory browsing, which allows remote attackers to obtain sensitive information via HTTP requests...

CVE-2011-4435

CVE-2011-4435 affects the web-server component of the Consolidation and Analysis Engine (CAE) Server in IBM DB2 Tools 2.3.0 for z/OS. The issue is that directory browsing is not prevented, enabling remote attackers to obtain sensitive information via HTTP requests. CVSSv2 metrics indicate a Netwo...

CVE-2011-4435

The web-server component in the Consolidation and Analysis Engine CAE Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not prevent directory browsing, which allows remote attackers to obtain sensitive information via HTTP requests...

PT-2011-4952

Name of the Vulnerable Software and Affected Versions IBM DB2 Tools version 2.3.0 for z/OS Description The issue concerns the web-server component in the Consolidation and Analysis Engine CAE Server in DB2 Query Monitor, which fails to prevent directory browsing. This allows remote attackers to...

CVE-2011-4435: Undefined Security Weakness

The web-server component in the Consolidation and Analysis Engine CAE Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not prevent directory browsing, which allows remote attackers to obtain sensitive information via HTTP requests...

CVE-2011-1373

Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager STMM feature and the AUTOMATIC DATABASEMEMORY setting are configured, allows local users to cause a denial of service daemon crash via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager STMM feature and the AUTOMATIC DATABASEMEMORY setting are configured, allows local users to cause a denial of service daemon crash via unknown vectors...

CVE-2011-1373

Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager STMM feature and the AUTOMATIC DATABASEMEMORY setting are configured, allows local users to cause a denial of service daemon crash via unknown vectors...

CVE-2011-1373

CVE-2011-1373 affects IBM DB2 9.7 on UNIX prior to FP5 when STMM is enabled and DATABASE_MEMORY is set to AUTOMATIC. Local users can trigger a denial of service (daemon crash) via unknown vectors. The issue is documented across multiple sources, and remediation is available in the DB2 9.7 FP5 fix...

CVE-2011-1373

Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager STMM feature and the AUTOMATIC DATABASEMEMORY setting are configured, allows local users to cause a denial of service daemon crash via unknown vectors...