CVE-2011-0757

IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP2 on Linux, UNIX, and Windows does not properly revoke the DBADM authority, which allows remote authenticated users to execute non-DDL statements by leveraging previous possession of this authority...

CVE-2011-0757: Undefined Security Weakness

IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP2 on Linux, UNIX, and Windows does not properly revoke the DBADM authority, which allows remote authenticated users to execute non-DDL statements by leveraging previous possession of this authority...

PT-2011-2612

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.1 before FP10 IBM DB2 versions 9.5 before FP6a IBM DB2 versions 9.7 before FP2 Description The issue allows remote authenticated users to execute non-DDL statements by leveraging previous possession of the DBADM authority, d...

CVE-2011-0731

Buffer overflow in the DB2 Administration Server DAS component in IBM DB2 9.1 before FP10, 9.5 before FP7, and 9.7 before FP3 on Linux, UNIX, and Windows allows remote attackers to execute arbitrary code via unspecified vectors...

Buffer overflow

Buffer overflow in the DB2 Administration Server DAS component in IBM DB2 9.1 before FP10, 9.5 before FP7, and 9.7 before FP3 on Linux, UNIX, and Windows allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-0731

Buffer overflow in the DB2 Administration Server DAS component in IBM DB2 9.1 before FP10, 9.5 before FP7, and 9.7 before FP3 on Linux, UNIX, and Windows allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-0731

CVE-2011-0731 describes a buffer overflow in the IBM DB2 Administration Server (DAS) component. Affected products/versions include IBM DB2 9.1 prior to FP10, 9.5 prior to FP7, and 9.7 prior to FP3 running on Linux, UNIX, and Windows. The flaw allows a remote attacker to execute arbitrary code or ...

IBM DB2 9.5 < Fix Pack 7 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.5 running on the remote host is prior Fix Pack 7. It is, therefore, affected by the following vulnerabilities : - The 'db2dasrrm' component included with such versions fails to perform sufficient bounds checks on user- supplied input, which ...

PT-2011-2592

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.1 before FP10 IBM DB2 versions 9.5 before FP7 IBM DB2 versions 9.7 before FP3 Description A buffer overflow issue exists in the DB2 Administration Server component, allowing remote attackers to execute arbitrary code via...

IBM DB2 9.5 < 9.5 Fix Pack 7 Multiple Vulnerabilities

Binary data 5750.prm...

IBM DB2 9.7 < 9.7 Fix Pack 3 Multiple Vulnerabilities

Binary data 5751.prm...

IBM DB2 9.1 < Fix Pack 10 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.1 running on the remote host is prior to Fix Pack 10. It is, therefore, affected by one or more of the following issues : - It is possible to execute non-DDL statements even after an user's DBADM authority has been revoked. IC66811 - Multipl...

CVE-2011-0731: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the DB2 Administration Server DAS component in IBM DB2 9.1 before FP10, 9.5 before FP7, and 9.7 before FP3 on Linux, UNIX, and Windows allows remote attackers to execute arbitrary code via unspecified vectors...

IBM DB2 db2dasrrm validateUser Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM DB2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the db2dasrrm process responsible for handling queries to the com.ibm.db2.das.core.DasSysCmd...

IBM DB2 db2dasrrm receiveDASMessage Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM DB2. Authentication is not required to exploit this vulnerability. The flaw exists within the db2dasrrm component which listens by default on TCP port 524. When allocating a buffer within...

Nmap NSE: DB2 Info

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE: DB2 Info

This script attempts to extract information from IBM DB2 Server instances. This is a wrapper on the Nmap Security Scanner's http://nmap.org db2-info.nse. OpenVAS Vulnerability Test $Id: gbnmapdb2info.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap DB2 Info NSE script. Authors: NSE-Script...

IBM DB2, IBM Informix, ЛИНТЕР [Редковстречающиеся СУБД]

Intro- Буду краток: рассмотрим здесь особенности СУБД, которые попадаются на глаза довольно редко. Я расскажу о 3х из них: IBM DB2, IBM Informix и ЛИНТЕР. Также в приложении можно обнаружить эксплоиты к ним и подобранную информацию о таких субд как Apache CouchDB, Berkeley DB, CUBRID, H2,...

IBM DB2 9.7 < Fix Pack 3 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.7 running on the remote host is prior Fix Pack 3. It is, therefore, affected by one or more of the following issues : - When privileges on a database object are revoked from PUBLIC, the dependent functions are not marked INVALID. As a result...

IBM DB2 install_jar Arbitrary File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM DB2. Authentication is required in that a user must have the ability to connect to the database. The specific flaw exists within the installjar procedure. The installjar procedure contains a...