ibm db2 universal database 9.1 vulnerabilities and exploits

(subscribe to this query)

9.3

CVSSv2

Buffer overflow in the DAS server program in the Core DAS function component in IBM DB2 9.1 before FP4a and 9.5 before FP1 allows remote malicious users to execute arbitrary code or cause a denial of service (daemon crash) via unspecified vectors. NOTE: this might be related to C...

Ibm Db2 Universal Database 9.1

7.8

CVSSv2

Multiple stack-based buffer overflows in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 1 allow remote malicious users to cause a denial of service (system outage) via vectors related to (1) use of XQuery to issue statements; the (2) XMLQUERY, (3) XMLEXISTS, and (4) XMLTABLE s...

Ibm Db2 Universal Database 9.1 Ibm Db2 Universal Database 9.5

7.5

CVSSv2

The routine infrastructure component in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP1 on Unix and Linux does not change the ownership of the db2fmp process, which has unknown impact and attack vectors.

Ibm Db2 Universal Database 9.1 Ibm Db2 Universal Database 8.0 Ibm Db2 Universal Database Ibm Db2 Universal Database 8

7.2

CVSSv2

IBM DB2 Universal Database (UDB) 9.1 GA up to and including 9.1 FP1 allows local users with table SELECT privileges to perform unauthorized UPDATE and DELETE SQL commands via unknown vectors.

Ibm Db2 Universal Database Ibm Db2 Universal Database 9.1

6.9

CVSSv2

db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to overwrite arbitrary files via a symlink attack on files used for initialization.

Ibm Db2 Universal Database 9.1 Ibm Db2 Universal Database 9.5 Ibm Db2 Universal Database 8

6.9

CVSSv2

Stack-based buffer overflow in db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to execute arbitrary code via a long DASPROF environment variable.

Ibm Db2 Universal Database 9.1 Ibm Db2 Universal Database 9.5 Ibm Db2 Universal Database 8

6.9

CVSSv2

Multiple race conditions in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to gain root privileges via a symlink attack on certain files.

Ibm Db2 Universal Database

6.9

CVSSv2

Multiple untrusted search path vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to gain privileges via certain vectors related to (1) DB2 instance or FMP startup on Linux and Solaris; (2) exec of executables while running as root on non-...

Ibm Db2 Universal Database

6.9

CVSSv2

Stack-based buffer overflow in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows malicious users to execute arbitrary code via a long DASPROF and possibly other environment variables, which are copied into the buildDasPaths buffer.

Ibm Db2 Universal Database

6.5

CVSSv2

Unspecified vulnerability in the CLR stored procedure deployment from IBM Database Add-Ins for Visual Studio in the Visual Studio Net component in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 2 allows remote authenticated users to execute arbitrary code via unknown vectors.

Ibm Db2 Universal Database 9.1 Ibm Db2 Universal Database Ibm Db2 Universal Database 9.5

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook