PT-2011-3092

Name of the Vulnerable Software and Affected Versions IBM DB2 version 9.7 before FP5 Description The issue allows local users to cause a denial of service, resulting in a daemon crash, when the Self Tuning Memory Manager STMM feature and the AUTOMATIC DATABASE MEMORY setting are configured. The...

CVE-2011-1373: Undefined Security Weakness

Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager STMM feature and the AUTOMATIC DATABASEMEMORY setting are configured, allows local users to cause a denial of service daemon crash via unknown vectors...

IBM Db2 'DT_RPATH' Insecure Library Loading Code Execution Vulnerabilities

IBM Db2 is prone to insecure library loading vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2";...

IBM DB2 'DT_RPATH' Insecure Library Loading Code Execution Vulnerabilities

The host is running IBM DB2 and is prone to insecure library loading vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmdb2dtrpathinsecurelibloadvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ IBM DB2 'DTRPATH' Insecure Library Loading Code Execution Vulnerabilities Authors: Antu Sanadi...

Mandriva Update for krb5 MDVSA-2011:160 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVSA-2011:160 krb5 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Linux Security Advisory : krb5 (MDVSA-2011:160)

Multiple vulnerabilities has been found and corrected in krb5 : The krb5ldaplockoutaudit function in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8 through 1.8.4 and 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service assertion...

Null pointer dereference

The lookuplockoutpolicy function in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 aka Berkeley DB or LDAP back end is used, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via vectors...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation. The krb5db2lockoutaudit function in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8 through 1.8.4, when the db2 aka Berkeley DB back end is used, allows remote attackers to cause a denial of...

PT-2011-1167

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions 1.8 through 1.8.4 MIT Kerberos 5 versions prior to 1.9.2 Description The issue affects the Key Distribution Center KDC in MIT Kerberos 5 when the db2 back end is used, allowing remote attackers to cause a denial of...

USN-1233-1: Kerberos Vulnerabilities

Nalin Dahyabhai, Andrej Ota and Kyle Moffett discovered a NULL pointer dereference in the KDC LDAP backend. An unauthenticated remote attacker could use this to cause a denial of service. This issue affected Ubuntu 11.10. CVE-2011-1527 Mark Deneen discovered that an assert could be triggered in t...

CVE-2011-4061

Multiple untrusted search path vulnerabilities in 1 db2rspgn and 2 kbbacf1 in IBM DB2 Express Edition 9.7, as used in the IBM Tivoli Monitoring for Databases: DB2 Agent, allow local users to gain privileges via a Trojan horse libkbb.so in the current working directory, related to the DTRPATH ELF...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in 1 db2rspgn and 2 kbbacf1 in IBM DB2 Express Edition 9.7, as used in the IBM Tivoli Monitoring for Databases: DB2 Agent, allow local users to gain privileges via a Trojan horse libkbb.so in the current working directory, related to the DTRPATH ELF...

CVE-2011-4061

Multiple untrusted search path vulnerabilities in 1 db2rspgn and 2 kbbacf1 in IBM DB2 Express Edition 9.7, as used in the IBM Tivoli Monitoring for Databases: DB2 Agent, allow local users to gain privileges via a Trojan horse libkbb.so in the current working directory, related to the DTRPATH ELF...

CVE-2011-4061

Multiple untrusted search path vulnerabilities in 1 db2rspgn and 2 kbbacf1 in IBM DB2 Express Edition 9.7, as used in the IBM Tivoli Monitoring for Databases: DB2 Agent, allow local users to gain privileges via a Trojan horse libkbb.so in the current working directory, related to the DTRPATH ELF...

CVE-2011-4061

CVE-2011-4061 affects IBM DB2 9.7 (and 9.5) when ITMA (Tivoli Monitoring Agent) is bundled with DB2 on UNIX/Linux platforms. The vulnerability arises from insecure DT_RPATH-based loading of libkbb.so via the SUID-root binary kbbacf1 in the ITMA component, allowing a local user to escalate privile...

PT-2011-4834

Name of the Vulnerable Software and Affected Versions IBM DB2 Express Edition 9.7 Description The issue concerns untrusted search path vulnerabilities in the db2rspgn and kbbacf1 components of IBM DB2 Express Edition. This allows local users to gain privileges by utilizing a Trojan horse libkbb.s...

CVE-2011-4061: Undefined Security Weakness

Multiple untrusted search path vulnerabilities in 1 db2rspgn and 2 kbbacf1 in IBM DB2 Express Edition 9.7, as used in the IBM Tivoli Monitoring for Databases: DB2 Agent, allow local users to gain privileges via a Trojan horse libkbb.so in the current working directory, related to the DTRPATH ELF...

IBM DB2 Unsupported Version Detection

According to its self-reported version number, the installation of IBM DB2 on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. %NASLMINLEVEL...

broadcast-db2-discover NSE Script

Attempts to discover DB2 servers on the network by sending a broadcast request to port 523/udp. Script Arguments max-newtargets, newtargets See the documentation for the target library. Example Usage nmap --script db2-discover Script Output Pre-scan script results: | broadcast-db2-discover: |...

IBM DB2 'DT_RPATH'不安全库装载任意代码执行漏洞

Bugtraq ID: 48514 IBM DB2 Universal Database Server是一款大型的商业关系数据库系统。 IBM DB2 'DTRPATH'不安全库装载，本地攻击者可以利用漏洞提升特权，以root权限执行任意代码。 IBM DB2 厂商解决方案 目前没有详细解决方案提供： http://www-306.ibm.com/software/data/db2/ / Redistribution and use in source and binary forms, with or without modification, are permitted provid...