ibm db2 10.1 vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an information disclosure caused by improper privilege management when table function is used. IBM X-Force ID: 221973.

Ibm Db2 10.1 Ibm Db2 11.1 Ibm Db2 9.7 Ibm Db2 10.5 Ibm Db2 11.5

7.2

CVSSv2

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local malicious user to execute arbitrary code on the system with root privileges. IBM X-Fo...

Ibm Db2 9.7 Ibm Db2 10.1 Ibm Db2 10.5 Ibm Db2 11.1 Ibm Db2 11.5

3.5

CVSSv2

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user who can create a view or inline SQL function to obtain sensitive information when AUTO_REVAL is set to DEFFERED_FORCE. IBM X-Force ID: 199283.

Ibm Db2 10.1 Ibm Db2 11.1 Ibm Db2 9.7 Ibm Db2 10.5 Ibm Db2 11.5

4.4

CVSSv2

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to execute arbitrary code and conduct DLL hijacking attacks.

Ibm Db2 10.1 Ibm Db2 11.1 Ibm Db2 9.7 Ibm Db2 10.5 Ibm Db2 11.5

5

CVSSv2

Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server terminates abnormally when executing a specially crafted SELECT statement. IBM X-Force ID: 200659.

Ibm Db2 10.1 Ibm Db2 11.1 Ibm Db2 9.7 Ibm Db2 10.5 Ibm Db2 11.5

4

CVSSv2

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5, under specific circumstance of a table being dropped while being accessed in another session, could allow an authenticated user to cause a denial of srevice IBM X-Force ID: 203031.

Ibm Db2 9.7 Ibm Db2 10.1 Ibm Db2 10.5 Ibm Db2 11.1 Ibm Db2 11.5

4

CVSSv2

IBM DB2 9.5 up to and including 10.5 on Linux, UNIX, and Windows stores passwords during the processing of certain SQL statements by the monitoring and audit facilities, which allows remote authenticated users to obtain sensitive information via commands associated with these fac...

Ibm Db2 9.7 Ibm Db2 9.8 Ibm Db2 10.1 Ibm Db2 10.5 Ibm Db2 9.5

5

CVSSv2

The Fast Communications Manager (FCM) in IBM DB2 Enterprise Server Edition and Advanced Enterprise Server Edition 10.1 before FP3 and 10.5, when a multi-node configuration is used, allows remote malicious users to cause a denial of service via vectors involving arbitrary data.

Ibm Db2 10.5 Ibm Db2 10.1

3.6

CVSSv2

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to read and write specific files due to weak file permissions. IBM X-Force ID: 192469.

Ibm Db2 9.7 Ibm Db2 10.1 Ibm Db2 10.5 Ibm Db2 Netapp Oncommand Insight -

7.2

CVSSv2

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local malicious user to execute arbitrary code on the system with root privileges. IB...

Ibm Db2 9.7 Ibm Db2 10.1 Ibm Db2 10.5 Ibm Db2 Netapp Oncommand Insight -

Get Started

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook