IBM DB2 9.7 < 9.7 Fix Pack 3 Multiple Vulnerabilities

Binary data 5751.prm...

IBM DB2 9.7 < Fix Pack 3 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.7 running on the remote host is prior Fix Pack 3. It is, therefore, affected by one or more of the following issues : - When privileges on a database object are revoked from PUBLIC, the dependent functions are not marked INVALID. As a result...

IBM DB2 Multiple Vulnerabilities (Oct10)

The host is running IBM DB2 and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmdb2multvulnoct10.nasl 7585 2017-10-26 15:03:01Z cfischer $ IBM DB2 Multiple Vulnerabilities Oct10 Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone Networks GmbH,...

IBM WebSphere Application Server WS-Security Policy Unspecified vulnerability

The host is running IBM WebSphere Application Server and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: secpodibmwastimestampunspecifiedvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ IBM WebSphere Application Server WS-Security Policy Unspecified vulnerability Authors: Antu...

IBM DB2 SYSIBMADM Multiple Vulnerabilities (Sep10)

The host is running IBM DB2 and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmdb2sysibmadmmultvulnsep10.nasl 7585 2017-10-26 15:03:01Z cfischer $ IBM DB2 SYSIBMADM Multiple Vulnerabilities Sep10 Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone Networks GmbH,...

IBM DB2 9.1 < 9.1 Fix Pack 10 Multiple Vulnerabilities

Binary data 5749.prm...

IBM DB2 9.7 < 9.7 Fix Pack 2 Multiple Vulnerabilities

Binary data 5556.prm...

IBM WebSphere Application Server Long Filename Information Disclosure Vulnerability

IBM WebSphere Application Server WAS is prone to an information- disclosure vulnerability. Exploiting this issue may allow an attacker to access sensitive information that may aid in further attacks. This issue affects WAS 6.0, 6.1, and 7.0. OpenVAS Vulnerability Test $Id: gbibmwebsphere40277.nas...

IBM DB2 9.1 < Fix Pack 9 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.1 running on the remote host is affected by one or more of the following issues : - The 'MODIFIED SQL DATA' table function is not dropped when a definer loses required privileges to maintain the objects. IZ46773 - A privilege escalation...

IBM WebSphere Application Server 7.0 < Fix Pack 9

IBM WebSphere Application Server 7.0 before Fix Pack 9 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - An unspecified cross-site scripting vulnerability in the Administration Console. PK97376 - An error when defining a wsadmin scripting...

IBM WebSphere Application Server 6.0 < 6.0.2.19 HTTP Response Splitting

IBM WebSphere Application Server 6.0.x before Fix Pack 19 appears to be running on the remote host. Such versions are reportedly affected by an HTTP response splitting vulnerability because the application fails to properly sanitize user-supplied data to an unspecified parameter and script. C...

IBM WebSphere Application Server 6.0 < 6.0.2.21 Multiple Vulnerabilities

IBM WebSphere Application Server 6.0.x before Fix Pack 21 appears to be running on the remote host. Such versions are reportedly affected by multiple vulnerabilities. - The web container sends response data intended for a different request in certain circumstances after a closed connection error...

IBM WebSphere Application Server < 6.1.0.15 Multiple Vulnerabilities

IBM WebSphere Application Server 6.1 before Fix Pack 15 appears to be running on the remote host. As such, it is reportedly affected by the following vulnerabilities : - There is an as-yet unspecified security exposure in wsadmin PK45726. - Sensitive information might appear in plaintext in the...

IBM DB2 - 'REPEAT()' Local Heap Buffer Overflow

source: https://www.securityfocus.com/bid/37976/info IBM DB2 is prone to a heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code with elevated privileges or crash...

WebSphere 6.1 跨站脚本漏洞

漏洞信息： WebSphere 是 IBM 的软件平台。它包含了编写、运行和监视全天候的工业强度的随需应变 Web 应用程序和跨平台、跨产品解决方案所需要的整个中间件基础设施，如服务器、服务和工具。WebSphere 提供了可靠、灵活和健壮的软件。 IBM WebSphere Application Server WAS的UDDI用户控制台的uddigui/navigateTree.do中存在多个跨站脚本攻击漏洞。 远程攻击者可以借助1 keyField, 2 nameField, 3 valueField, 和 4 frameReturn参数，注入任意web脚本或HTML。 漏洞影响：...

IBM DB2 9.5 Fix Pack 5之前多个未明安全漏洞

Bugraq ID: 37332 IBM DB2 Universal Database Server是一款大型的商业关系数据库系统。 IBM DB2存在多个未明安全漏洞。目前没有详细漏洞细节提供。 IBM DB2 Universal Database 9.5 Fixpak 4 IBM DB2 Universal Database 9.5 Fixpak 2 IBM DB2 Universal Database 9.5 Fix Pack 3a IBM DB2 Universal Database 9.5 Fix Pack 1 IBM DB2 Universal Database 9.5...

IBM DB2 9.5 < Fix Pack 5 Multiple Unspecified Vulnerabilities

The IBM DB2 database server installed on the remote host is prior to 9.5 Fix Pack 5. It is, therefore, affected by multiple unspecified vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid43172;...

IBM DB2 9.5 < Fix Pack 5 Multiple Vulnerabilities

Binary data 5262.prm...

IBM InfoSphere Information Server存在缓冲区溢出和跨站脚本漏洞

Bugraq ID: 37245, 37246 IBM InfoSphere Information Server是一款数据集成软件平台，可以帮助企业从分散在系统中的复杂的异类信息中获得更多价值。 IBM InfoSphere Information Server存在多个安全漏洞，本地用户可以提升特权或进行跨站脚本攻击。 -传递给信息服务器WEB控制台的参数缺少充分过滤，攻击者可以进行跨站脚本攻击，获得敏感信息。 -DataStage中的部分SETUID程序存在错误，可触发缓冲区溢出。 IBM InfoSphere Information Server 8.1 IBM InfoSpher...

IBM WebSphere Application Server 7.0 < Fix Pack 7

IBM WebSphere Application Server 7.0 before Fix Pack 7 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - A cross-site request forgery vulnerability exists due to insufficient validation of user-supplied input by the administrative console...