IBM DB2 Administration Server Detection

The remote host is running an IBM DB2 Administration Server. DB2 is an enterprise relational database management system, and the Administration Server is used by DB2 to administer databases across a network. C Tenable, Inc. include"compat.inc"; if description scriptid22016; scriptversion"1.31";...

CVE-2006-3068

IBM DB2 Universal Database UDB before 8.2 FixPak 12 allows remote attackers to cause a denial of service application crash by sending "incorrect information ... regarding the package name/creator," which leads to a "memory overwrite."...

CVE-2006-3066

Buffer overflow in the TCP/IP listener in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allows remote attackers to cause a denial of service application crash via a long MGRLVLLS message inside of an EXCSAT message when establishing a connection...

CVE-2006-3067

Multiple unspecified vulnerabilities in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allow remote attackers to cause a denial of service application crash via a 1 "long column list" in the a REPLACE INTO and b INSERT INTO portions of the LOAD command or a 2 large number of values in an IN...

CVE-2006-3066

Buffer overflow in the TCP/IP listener in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allows remote attackers to cause a denial of service application crash via a long MGRLVLLS message inside of an EXCSAT message when establishing a connection...

CVE-2006-3067

Multiple unspecified vulnerabilities in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allow remote attackers to cause a denial of service application crash via a 1 "long column list" in the a REPLACE INTO and b INSERT INTO portions of the LOAD command or a 2 large number of values in an IN...

CVE-2006-3067

CVE-2006-3067 affects IBM DB2 Universal Database (UDB) prior to 8.1 FixPak 12. The vulnerability arises in the LOAD command: an overly long column list in REPLACE INTO or INSERT INTO, or a very large IN clause, potentially tied to a buffer overflow, enabling remote denial-of-service (application ...

CVE-2006-3068

IBM DB2 Universal Database (UDB) before 8.2 FixPak 12 is affected by a remote denial of service due to a memory overwrite caused by sending "incorrect information" about the package name/creator. This CVE involves a flaw in how the database handles certain crafted input, leading to an application...

CVE-2006-3066

CVE-2006-3066 affects IBM DB2 Universal Database (UDB) prior to 8.1 FixPak 12. The issue is a buffer overflow in the TCP/IP listener triggered by a long MGRLVLLS message inside an EXCSAT during connection establishment, which may allow a remote attacker to cause an application crash (DoS). This v...

CVE-2006-3068

IBM DB2 Universal Database UDB before 8.2 FixPak 12 allows remote attackers to cause a denial of service application crash by sending "incorrect information ... regarding the package name/creator," which leads to a "memory overwrite."...

CVE-2006-3067: Undefined Security Weakness

Multiple unspecified vulnerabilities in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allow remote attackers to cause a denial of service application crash via a 1 "long column list" in the a REPLACE INTO and b INSERT INTO portions of the LOAD command or a 2 large number of values in an IN...

CVE-2006-3068: Undefined Security Weakness

IBM DB2 Universal Database UDB before 8.2 FixPak 12 allows remote attackers to cause a denial of service application crash by sending "incorrect information ... regarding the package name/creator," which leads to a "memory overwrite."...

CVE-2006-3066: Undefined Security Weakness

Buffer overflow in the TCP/IP listener in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allows remote attackers to cause a denial of service application crash via a long MGRLVLLS message inside of an EXCSAT message when establishing a connection...

IBM DB2 Universal Database multiple denial of service conditions

No description provided...

[SA20579] DB2 Universal Database Multiple Denial of Service Vulnerabilities

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

IBM DB2 < 8.12.0 Multiple DoS (deprecated)

Binary data 3652.prm...

Design/Logic Flaw

AngelineCMS 0.6.5 and earlier allow remote attackers to obtain sensitive information via a direct request for 1 adodb-access.inc.php, 2 adodb-ado.inc.php, 3 adodb-adoaccess.inc, 4 adodb-adomssql.inc.php, 5 adodb-borlandibase, 6 adodb-csv.inc.php, 7 adodb-db2.inc.php, 8 adodb-fbsql.inc.php, 9...

[Full-disclosure] CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability CA Vulnerability ID: 34013 CA Advisory Date: 2006-05-02 Discovered By: IBM Global Services Impact: Local attacker can gain escalated privileges. Summary: A potential...

CVE-2005-4738

IBM DB2 Universal Database UDB 810 before ESE AIX 5765F4100 does not ensure that a user has execute privileges before permitting object creation based on routines, which allows remote authenticated users to gain privileges...

CVE-2005-4736

CVE-2005-4736 affects IBM DB2 Universal Database (UDB) 8.2 until FP10. The vulnerability allows remote authenticated users to cause a denial of service (disk consumption) by triggering an infinite loop in the hash-join path (hsjn) through sqlri_hsjnFlushBlocks. The issue is tied to the specific h...