189 matches found
[Full-disclosure] Details for BID 19586 - DB2 UDB Vulnerability
DB2 UDB - Handshake Protocol DoS Attack BID 19586 Background DB2 Universal Database UDBtm is a popular database software package from IBM available for legacy platforms as well as open systems Unix and Windows. Clients use a protocol called DRDA to communicate with the DB2 UDB server. Protocol...
[Full-disclosure] Details for BID 18428
DB2 UDB - Unauthenticated Buffer Overflow and DoS BID 18428 Background DB2 Universal Database UDBtm is a popular database software package from IBM available for legacy platforms as well as open systems Unix and Windows. Clients use a protocol called DRDA to communicate with the DB2 UDB server...
CVE-2006-4257
IBM DB2 Universal Database UDB before 8.1 FixPak 13 allows remote authenticated users to cause a denial of service crash by 1 sending the first ACCSEC command without an RDBNAM parameter during the CONNECT process, or 2 sending crafted SQLJRA packet, which results in a null dereference...
CVE-2006-4257
IBM DB2 Universal Database UDB before 8.1 FixPak 13 allows remote authenticated users to cause a denial of service crash by 1 sending the first ACCSEC command without an RDBNAM parameter during the CONNECT process, or 2 sending crafted SQLJRA packet, which results in a null dereference...
CVE-2006-4257
CVE-2006-4257 affects IBM DB2 UDB prior to 8.1 FixPak 13. A remote authenticated attacker can cause a denial-of-service (crash) by (1) sending the first ACCSEC command without an RDBNAM parameter during the CONNECT process, or (2) sending a crafted SQLJRA packet, which results in a NULL dereferen...
CVE-2006-3067
Multiple unspecified vulnerabilities in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allow remote attackers to cause a denial of service application crash via a 1 "long column list" in the a REPLACE INTO and b INSERT INTO portions of the LOAD command or a 2 large number of values in an IN...
CVE-2006-3067
CVE-2006-3067 affects IBM DB2 Universal Database (UDB) prior to 8.1 FixPak 12. The vulnerability arises in the LOAD command: an overly long column list in REPLACE INTO or INSERT INTO, or a very large IN clause, potentially tied to a buffer overflow, enabling remote denial-of-service (application ...
CVE-2006-3068
IBM DB2 Universal Database (UDB) before 8.2 FixPak 12 is affected by a remote denial of service due to a memory overwrite caused by sending "incorrect information" about the package name/creator. This CVE involves a flaw in how the database handles certain crafted input, leading to an application...
CVE-2006-3067
Multiple unspecified vulnerabilities in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allow remote attackers to cause a denial of service application crash via a 1 "long column list" in the a REPLACE INTO and b INSERT INTO portions of the LOAD command or a 2 large number of values in an IN...
CVE-2006-3068
IBM DB2 Universal Database UDB before 8.2 FixPak 12 allows remote attackers to cause a denial of service application crash by sending "incorrect information ... regarding the package name/creator," which leads to a "memory overwrite."...
CVE-2006-3066
CVE-2006-3066 affects IBM DB2 Universal Database (UDB) prior to 8.1 FixPak 12. The issue is a buffer overflow in the TCP/IP listener triggered by a long MGRLVLLS message inside an EXCSAT during connection establishment, which may allow a remote attacker to cause an application crash (DoS). This v...
CVE-2005-4740
IBM DB2 Universal Database (UDB) 810 before version 8 FixPak 10 is affected: remote authenticated users can cause a denial of service (db2jd service crash) by connecting from a downlevel client. The connected sources do not provide a specific fix version or mitigation; monitor for an official pat...
CVE-2005-4736
CVE-2005-4736 affects IBM DB2 Universal Database (UDB) 8.2 until FP10. The vulnerability allows remote authenticated users to cause a denial of service (disk consumption) by triggering an infinite loop in the hash-join path (hsjn) through sqlri_hsjnFlushBlocks. The issue is tied to the specific h...
CVE-2005-4735
IBM DB2 Universal Database UDB 810 before 8.1 FP10 allows remote authenticated users to cause a denial of service application crash via 1 certain equality predicates that trigger self-removal, aka IY70808; and 2 a query with more than 32000 elements in the IN-list, aka LI70817...
CVE-2005-4738
IBM DB2 Universal Database (UDB) 8.1.0 prior to ESE AIX 5765F4100 is vulnerable to privilege escalation because it does not verify execute privileges for objects created from routines, allowing remote authenticated users to gain privileges. Affected product/version: IBM DB2 UDB 8.1.0 (ESE AIX 576...
CVE-2005-4738
IBM DB2 Universal Database UDB 810 before ESE AIX 5765F4100 does not ensure that a user has execute privileges before permitting object creation based on routines, which allows remote authenticated users to gain privileges...
CVE-2005-4736
IBM DB2 Universal Database UDB 820 before 8.2 FP10 allows remote authenticated users to cause a denial of service disk consumption via a hash join hsjn that triggers an infinite loop in sqlrihsjnFlushBlocks...
CVE-2005-4739
IBM DB2 Universal Database UDB 820 before version 8 FixPak 10 s050811 allows remote authenticated users to cause a denial of service application crash by using a table function for an instance of snapshottbreorg, which triggers a trap in sqlnrEStoEaction...
CVE-2005-4735
IBM DB2 Universal Database (UDB) 8.1 Release 810 before 8.1 FP10 is affected by a DoS vulnerability reported as CVE-2005-4735. The issue allows remote authenticated users to crash the application via two input-based vectors: (1) certain equality predicates that trigger self-removal (IY70808) and ...