CVE-2006-3066: Undefined Security Weakness

Buffer overflow in the TCP/IP listener in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allows remote attackers to cause a denial of service application crash via a long MGRLVLLS message inside of an EXCSAT message when establishing a connection...

CVE-2006-3067: Undefined Security Weakness

Multiple unspecified vulnerabilities in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allow remote attackers to cause a denial of service application crash via a 1 "long column list" in the a REPLACE INTO and b INSERT INTO portions of the LOAD command or a 2 large number of values in an IN...

CVE-2006-3068: Undefined Security Weakness

IBM DB2 Universal Database UDB before 8.2 FixPak 12 allows remote attackers to cause a denial of service application crash by sending "incorrect information ... regarding the package name/creator," which leads to a "memory overwrite."...

CVE-2005-4735

IBM DB2 Universal Database (UDB) 8.1 Release 810 before 8.1 FP10 is affected by a DoS vulnerability reported as CVE-2005-4735. The issue allows remote authenticated users to crash the application via two input-based vectors: (1) certain equality predicates that trigger self-removal (IY70808) and ...

CVE-2005-4737

CVE-2005-4737 affects IBM DB2 Universal Database (UDB) 8.2 before ESE AIX 5765F4100. The issue allows remote authenticated users to cause a denial of service (CPU consumption) by abnormally terminating a connection, which prevents db2agents from being properly cleared. Documentation consistently ...

CVE-2005-4739

CVE-2005-4739 affects IBM DB2 Universal Database (UDB) 8.2 prior to FixPak 10 (s050811). A remote authenticated user can trigger a denial of service (application crash) by using a table function for an instance of snapshot_tbreorg, which causes a trap in sqlnr_EStoE_action. This is the explicit i...

CVE-2005-4740

IBM DB2 Universal Database (UDB) 810 before version 8 FixPak 10 is affected: remote authenticated users can cause a denial of service (db2jd service crash) by connecting from a downlevel client. The connected sources do not provide a specific fix version or mitigation; monitor for an official pat...

CVE-2005-4735

IBM DB2 Universal Database UDB 810 before 8.1 FP10 allows remote authenticated users to cause a denial of service application crash via 1 certain equality predicates that trigger self-removal, aka IY70808; and 2 a query with more than 32000 elements in the IN-list, aka LI70817...

CVE-2005-4736

IBM DB2 Universal Database UDB 820 before 8.2 FP10 allows remote authenticated users to cause a denial of service disk consumption via a hash join hsjn that triggers an infinite loop in sqlrihsjnFlushBlocks...

CVE-2005-4739

IBM DB2 Universal Database UDB 820 before version 8 FixPak 10 s050811 allows remote authenticated users to cause a denial of service application crash by using a table function for an instance of snapshottbreorg, which triggers a trap in sqlnrEStoEaction...

CVE-2005-4740

IBM DB2 Universal Database UDB 810 before version 8 FixPak 10 allows remote authenticated users to cause a denial of service db2jd service crash by "connecting from a downlevel client."...

CVE-2005-4738

IBM DB2 Universal Database UDB 810 before ESE AIX 5765F4100 does not ensure that a user has execute privileges before permitting object creation based on routines, which allows remote authenticated users to gain privileges...

CVE-2005-4736

CVE-2005-4736 affects IBM DB2 Universal Database (UDB) 8.2 until FP10. The vulnerability allows remote authenticated users to cause a denial of service (disk consumption) by triggering an infinite loop in the hash-join path (hsjn) through sqlri_hsjnFlushBlocks. The issue is tied to the specific h...

CVE-2005-4738

IBM DB2 Universal Database (UDB) 8.1.0 prior to ESE AIX 5765F4100 is vulnerable to privilege escalation because it does not verify execute privileges for objects created from routines, allowing remote authenticated users to gain privileges. Affected product/version: IBM DB2 UDB 8.1.0 (ESE AIX 576...

CVE-2005-4737: Undefined Security Weakness

IBM DB2 Universal Database UDB 820 before ESE AIX 5765F4100 allows remote authenticated users to cause a denial of service CPU consumption by "abnormally" terminating a connection, which prevents db2agents from being properly cleared...

CVE-2005-4738: Undefined Security Weakness

IBM DB2 Universal Database UDB 810 before ESE AIX 5765F4100 does not ensure that a user has execute privileges before permitting object creation based on routines, which allows remote authenticated users to gain privileges...

CVE-2005-4739: Undefined Security Weakness

IBM DB2 Universal Database UDB 820 before version 8 FixPak 10 s050811 allows remote authenticated users to cause a denial of service application crash by using a table function for an instance of snapshottbreorg, which triggers a trap in sqlnrEStoEaction...

CVE-2005-4740: Undefined Security Weakness

IBM DB2 Universal Database UDB 810 before version 8 FixPak 10 allows remote authenticated users to cause a denial of service db2jd service crash by "connecting from a downlevel client."...

CVE-2005-4735: Undefined Security Weakness

IBM DB2 Universal Database UDB 810 before 8.1 FP10 allows remote authenticated users to cause a denial of service application crash via 1 certain equality predicates that trigger self-removal, aka IY70808; and 2 a query with more than 32000 elements in the IN-list, aka LI70817...

CVE-2005-4736: Undefined Security Weakness

IBM DB2 Universal Database UDB 820 before 8.2 FP10 allows remote authenticated users to cause a denial of service disk consumption via a hash join hsjn that triggers an infinite loop in sqlrihsjnFlushBlocks...