IBM DB2 < 8.1 Fix Pack 13 CONNECT Processing Unspecified DoS

According to its version, the installation of IBM DB2 running on the remote host may crash in certain scenarios, such as when a user connects using a specially crafted ACCSEC command during the handshake process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc...

IBM DB2远程DQLJRA包拒绝服务漏洞

IBM DB2 Database Server是一款流行的数据库服务程序。 IBM DB2 Database Server sqledb2raasrecvrequest请求处理存在问题，远程攻击者可利用此漏洞对服务程序进行拒绝服务攻击。 当连接远程DB2实例，版本7客户端一般会发送一个SQLJRA包请求启动连接，不过一个特殊构建的SQLJRA包可引起DB2实例崩溃，在当引用一个NULL指针时sqledb2raasrecvrequest 来自DB2ENGN.DLL出现访问冲突错误。 IBM DB2 Universal Database Win98/NT/2000 7.0 IBM DB2...

CVE-2006-6638

IBM DB2 8.1 before FixPak 14 allows remote attackers to cause a denial of service via a crafted SQLJRA packet, which causes a NULL pointer dereference in the sqledb2raasrecvrequest function in DB2ENGN.DLL, a different issue than CVE-2006-4257...

IBM DB2 database server DoS

NULL pointer dereference on malformed SQLJRA packet...

IBM DB2 Remote DoS during CONNECT processing

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM DB2 Remote DoS during CONNECT processing AppSecInc Team SHATTER Security Advisory: http://www.appsecinc.com/resources/alerts/db2/2006-09-05.shtml Affected versions: All versions of IBM DB2 Database Server Risk level: Medium Credits: This...

IBM DB2 Universal Database 7.2 (db2licm) Local Exploit

No description provided by source. / Local Exploit for db2licm IBM db2 v 7.1 Linux/x86 vulnerability researched by Juan Manuel Pascual Escriba pask at uninet.edu / char sc= "\x31\xc0" / begin setuid 0 / "\x31\xdb" "\xb0\x17" "\xcd\x80" "\xeb\x1f" "\x5e" "\x89\x76\x08" "\x31\xc0" "\x88\x46\x07"...

IBM DB2多个拒绝服务漏洞

IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。 DB2的实现上存在多个拒绝服务漏洞，远程或本地攻击者可能导致服务器拒绝服务。 在创建到数据库的连接时客户端所使用的第一个消息是EXCSAT（消息代码0x1041）。这个消息中包含有名为MGRLVLLS（code 0x2114）的对象。当MGRLVLLS消息足够大（1Kb字节）时，就会触发缓冲区溢出。如果客户端在发送完这个消息后立即终止连接，就会导致终止服务进程。 如果LOAD命令中的REPLACE...

IBM DB2 Connection Port Detection

The remote host is running IBM DB2 with an open connection port for a DB2 instance. IBM DB2 is a commercial database, and a connection port is used by remote clients when connecting to a DB2 server instance. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid22416;...

IBM DB2 Interrupt Port Detection

The remote host is running IBM DB2, with an open interrupt port for a DB2 instance. DB2 is an enterprise database solution, and an interrupt port is used to support requests from down-level clients. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

IBM DB2 database server DoS

Multiple DoS conditions in database server...

CVE-2006-4257

IBM DB2 Universal Database UDB before 8.1 FixPak 13 allows remote authenticated users to cause a denial of service crash by 1 sending the first ACCSEC command without an RDBNAM parameter during the CONNECT process, or 2 sending crafted SQLJRA packet, which results in a null dereference...

CVE-2006-4257

IBM DB2 Universal Database UDB before 8.1 FixPak 13 allows remote authenticated users to cause a denial of service crash by 1 sending the first ACCSEC command without an RDBNAM parameter during the CONNECT process, or 2 sending crafted SQLJRA packet, which results in a null dereference...

DoS против IBM DB2

Закрытие соединения после передачи 1 байта информации приводит к краху сервиса...

IBM DB2 Version Detection

Binary data 3698.prm...

IBM DB2 Discovery Service Detection

The remote host is running an IBM DB2 discovery service. DB2 is an enterprise database solution, and the discovery service is used by DB2 to locate databases across a network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid22017; scriptversion"1.16";...

IBM DB2 Administration Server Detection

The remote host is running an IBM DB2 Administration Server. DB2 is an enterprise relational database management system, and the Administration Server is used by DB2 to administer databases across a network. C Tenable, Inc. include"compat.inc"; if description scriptid22016; scriptversion"1.31";...

CVE-2006-3066

Buffer overflow in the TCP/IP listener in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allows remote attackers to cause a denial of service application crash via a long MGRLVLLS message inside of an EXCSAT message when establishing a connection...

CVE-2006-3068

IBM DB2 Universal Database UDB before 8.2 FixPak 12 allows remote attackers to cause a denial of service application crash by sending "incorrect information ... regarding the package name/creator," which leads to a "memory overwrite."...

CVE-2006-3067

Multiple unspecified vulnerabilities in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allow remote attackers to cause a denial of service application crash via a 1 "long column list" in the a REPLACE INTO and b INSERT INTO portions of the LOAD command or a 2 large number of values in an IN...

CVE-2006-3066

Buffer overflow in the TCP/IP listener in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allows remote attackers to cause a denial of service application crash via a long MGRLVLLS message inside of an EXCSAT message when establishing a connection...