CVE-2005-0417: Undefined Security Weakness

Unknown "high risk" vulnerability in DB2 Universal Database 8.1 and earlier has unknown impact and attack vectors. NOTE: due to the delayed disclosure of details for this issue, this candidate may be SPLIT in the future. In addition, this may be a duplicate of other issues as reported by the vend...

Multiple IBM DB2 bugs

Multiple bugs including buffer overflows...

[VulnWatch] Patch available for high risk IBM DB2 Universal Database flaw

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Researchers at NGSSoftware have discovered a high risk vulnerability in IBM's DB2 Universal Database Version 8.1 and earlier. IBM has just released Fixpak 8 for DB2 UDB 8.1 which addresses the security flaw...

CVE-2004-1372

CVE-2004-1372 affects IBM DB2 7.x and 8.1. multiple stack-based buffer overflows allow local users to execute arbitrary code via (1) a long third argument to rec2xml, or (2) a long filename argument to generate_distfile. Root cause is stack-based overflow in these input paths; impact is local cod...

CVE-2004-1372

Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via 1 a long third argument to the rec2xml function or 2 a long filename argument to the generatedistfile procedure...

CVE-2004-1372: Undefined Security Weakness

Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via 1 a long third argument to the rec2xml function or 2 a long filename argument to the generatedistfile procedure...

IBM DB2 libdb2.so buffer overflow (#NISR05012005B)

NGSSoftware Insight Security Research Advisory Name: IBM DB2 libdb2.so.1 buffer overflow Systems Affected: DB2 8.1/7.x Severity: High risk from local Vendor URL: http://www.ibm.com/ Author: David Litchfield david at ngssoftware.com Relates to: http://www.nextgenss.com/advisories/db2-02.txt Date o...

IBM DB2 to_char and to_date Denial Of Service (#NISR05012005G)

NGSSoftware Insight Security Research Advisory Name: IBM DB2 tochar and todate Denial Of Service Systems Affected: DB2 8.1 Severity: High risk from local Vendor URL: http://www.ibm.com/ Author: Chris Anley chris at ngssoftware.com Relates to: http://www.ngssoftware.com/advisories/db2-02.txt Date ...

IBM DB2 Windows Permission Problems (#NISR05012005F)

NGSSoftware Insight Security Research Advisory Name: IBM DB2 Windows Permission Problems Systems Affected: DB2 8.1 Severity: High risk from local Vendor URL: http://www.ibm.com/ Author: Chris Anley chris at ngssoftware.com Relates to: http://www.ngssoftware.com/advisories/db2-02.txt Date of Publi...

IBM DB2 db2fmp buffer overflow (#NISR05012005A)

NGSSoftware Insight Security Research Advisory Name: IBM DB2 db2fmp buffer overflow Systems Affected: DB2 8.1/7.x Severity: High risk from local Vendor URL: http://www.ibm.com/ Author: David Litchfield david at ngssoftware.com Relates to: http://www.nextgenss.com/advisories/db2-02.txt Date of...

IBM DB2 call buffer overflow (#NISR05012005C)

NGSSoftware Insight Security Research Advisory Name: IBM DB2 call buffer overflow Systems Affected: DB2 8.1/7.x Severity: High risk from remote Vendor URL: http://www.ibm.com/ Author: David Litchfield david at ngssoftware.com Relates to: http://www.nextgenss.com/advisories/db2-02.txt Date of Publ...

IBM DB2 XML functions overflows (#NISR05012005H)

NGSSoftware Insight Security Research Advisory Name: IBM DB2 XML functions overflows Systems Affected: DB2 8.1 Severity: High risk from remote Vendor URL: http://www.ibm.com/ Author: David Litchfield david at ngssoftware.com Relates to: http://www.nextgenss.com/advisories/db2-02.txt Date of Publi...

IBM DB2 XML functions file creation vulnerabilities (#NISR05012005I)

NGSSoftware Insight Security Research Advisory Name: IBM DB2 XML functions file creation vulnerabilities Systems Affected: DB2 8.1 Severity: High risk from remote Vendor URL: http://www.ibm.com/ Author: David Litchfield david at ngssoftware.com Relates to:...

IBM DB2 JDBC Applet Server buffer overflow (#NISR05012005D)

NGSSoftware Insight Security Research Advisory Name: IBM DB2 JDBC Applet Server buffer overflow Systems Affected: DB2 8.1 Severity: High risk from remote Vendor URL: http://www.ibm.com/ Author: David Litchfield david at ngssoftware.com Relates to: http://www.nextgenss.com/advisories/db2-02.txt Da...

IBM DB2 SATADMIN.SATENCRYPT buffer overflow (#NISR05012005E)

NGSSoftware Insight Security Research Advisory Name: IBM DB2 SATADMIN.SATENCRYPT buffer overflow Systems Affected: DB2 8.1 Severity: Medium risk from remote Vendor URL: http://www.ibm.com/ Author: David Litchfield david at ngssoftware.com Relates to: http://www.nextgenss.com/advisories/db2-02.txt...

IBM DB2 rec2xml buffer overflow vulnerability (#NISR2122004J)

NGSSoftware Insight Security Research Advisory Name: IBM DB2 rec2xml buffer overflow Systems Affected: DB2 8.1/7.x Severity: High risk Vendor URL: http://www.ibm.com/ Author: David Litchfield mark at ngssoftware.com Relates to: http://www.nextgenss.com/advisories/db2-01.txt Date of Public Advisor...

IBM DB2 generate_distfile buffer overflow vulnerability (#NISR2122004L)

NGSSoftware Insight Security Research Advisory Name: IBM DB2 generatedistfile buffer overflow Systems Affected: DB2 8.1/7.x Severity: High risk Vendor URL: http://www.ibm.com/ Author: David Litchfield david at ngssoftware.com Relates to: http://www.nextgenss.com/advisories/db2-01.txt Date of Publ...

CVE-2004-0795

DB2 8.1 remote command server DB2RCMD.EXE executes the db2rcmdc.exe program as the db2admin administrator, which allows local users to gain privileges via the DB2REMOTECMD named pipe...

IBM DB2 < 8 Fix Pack 7a Multiple Vulnerabilities

The remote host is running a vulnerable version of IBM DB2. There are multiple remote buffer overflow vulnerabilities in this version that could allow an attacker to cause a denial of service, or possibly execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if NASLLEVEL 21...

[VulnWatch] Patch available for critical IBM DB2 Universal Database flaws

Researchers at NGSSoftware have discovered multiple critical/high risk vulnerabilities in IBM's DB2 Universal Database. Versions affected include DB2 8.1 Fixpak 7 and earlier IBM has updated Fixpak 6 and 7 to 6a and 7a to include fixes for these flaws. In all, 20 vulnerabilities, mostly remotely...