CVSS: 6.5EPSS: 0%CPEs: 10EXPL: 0CVE-2010-3736
https://notcve.org/view.php?id=CVE-2010-3736
05 Oct 2010 — Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a, when the connection concentrator is enabled, allows remote authenticated users to cause a denial of service (heap memory consumption) by using a different code page than the database server. Fuga de memoria en el componente Relational Data Services en IBM DB2 UDB v9.5 anterior a FP6a, cuando el concentrador de conexión está activado, permite a usuarios remotos autenticados provocar una denegación de servicio (consumo de la... • ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT • CWE-399: Resource Management Errors •
CVSS: 6.5EPSS: 0%CPEs: 10EXPL: 0CVE-2010-3737
https://notcve.org/view.php?id=CVE-2010-3737
05 Oct 2010 — Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (heap memory consumption) by executing a (1) user-defined function (UDF) or (2) stored procedure while using a different code page than the database server. Fuga de memoria en el componente Relational Data Services en IBM DB2 UDB v9.5 anterior a FP6a, permite a usuarios remotos autenticados provocar una denegación de servicio (consumo de la memoria dinámica -hea... • ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT • CWE-399: Resource Management Errors •
CVSS: 8.8EPSS: 0%CPEs: 10EXPL: 0CVE-2010-3738
https://notcve.org/view.php?id=CVE-2010-3738
05 Oct 2010 — The Security component in IBM DB2 UDB 9.5 before FP6a logs AUDIT events by using a USERID and an AUTHID value corresponding to the instance owner, instead of a USERID and an AUTHID value corresponding to the logged-in user account, which makes it easier for remote authenticated users to execute Audit administration commands without discovery. El componente Security en IBM DB2 UDB v9.5 anterior a FP6a registra eventos usando valores USERID y AUTHID correspondientes a la instancia del usuario propietario en v... • ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.5EPSS: 0%CPEs: 10EXPL: 0CVE-2010-3740
https://notcve.org/view.php?id=CVE-2010-3740
05 Oct 2010 — The Net Search Extender (NSE) implementation in the Text Search component in IBM DB2 UDB 9.5 before FP6a does not properly handle an alphanumeric Fuzzy search, which allows remote authenticated users to cause a denial of service (memory consumption and system hang) via the db2ext.textSearch function. La implementación de Net Search Extender (NSE) en el componente de búsqueda de texto en IBM DB2 UDB v9.5 antes de FP6a no controla correctamente una búsqueda alfanumérica difusa, lo que permite causar a usuario... • ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT • CWE-399: Resource Management Errors •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2010-3474
https://notcve.org/view.php?id=CVE-2010-3474
20 Sep 2010 — IBM DB2 9.7 before FP3 does not perform the expected drops or invalidations of dependent functions upon a loss of privileges by the functions' owners, which allows remote authenticated users to bypass intended access restrictions via calls to these functions, a different vulnerability than CVE-2009-3471. IBM DB2 v9.7 anteriores a FP3 no realiza las descargas esperadas o invalidaciones de las funciones dependientes de una pérdida de privilegios por los propietarios de las funciones, que permite a los usuario... • http://osvdb.org/68121 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 8.8EPSS: 1%CPEs: 3EXPL: 0CVE-2010-3475
https://notcve.org/view.php?id=CVE-2010-3475
20 Sep 2010 — IBM DB2 9.7 before FP3 does not properly enforce privilege requirements for execution of entries in the dynamic SQL cache, which allows remote authenticated users to bypass intended access restrictions by leveraging the cache to execute an UPDATE statement contained in a compiled compound SQL statement. IBM DB2 v9.7 anteriores a FP3 no aplican correctamente los requisitos de privilegio para la ejecución de las entradas en la caché dinámica SQL, lo que permite a usuarios remotos autenticados eludir las restr... • http://osvdb.org/68122 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 10.0EPSS: 2%CPEs: 26EXPL: 0CVE-2010-3193
https://notcve.org/view.php?id=CVE-2010-3193
31 Aug 2010 — Unspecified vulnerability in the DB2STST program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 has unknown impact and attack vectors. Vulnerabilidad sin especificar en el programa DB2STST en IBM DB2 v9.1 anterior a FP9, v9.5 anterior a FP6, y v9.7 anterior a FP2 tienen un impacto y vactores de ataque desconocidos. • ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT •
CVSS: 9.1EPSS: 0%CPEs: 26EXPL: 0CVE-2010-3194
https://notcve.org/view.php?id=CVE-2010-3194
31 Aug 2010 — The DB2DART program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows attackers to bypass intended file access restrictions via unspecified vectors related to overwriting files owned by an instance owner. El programa DB2DART en IBM DB2 v9.1 anterior a FP9, v9.5 anterior a FP6, y v9.7 anterior a FP2 permite a atacantes evitar las restricciones de los ficheros de acceso previstas a través de vectores sin especificar relacionados con con la sobreescritura de ficheros propietarios por una ins... • ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.5EPSS: 1%CPEs: 27EXPL: 0CVE-2010-3195
https://notcve.org/view.php?id=CVE-2010-3195
31 Aug 2010 — Unspecified vulnerability in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 on Windows Server 2008 allows attackers to cause a denial of service (trap) via vectors involving "special group and user enumeration." Vulnerabilidad sin especificar en IBM DB2 v9.1 anterior a FP9, v9.5 anterior a FP6, y v9.7 anterior a FP2 en Windows Server 2008 permite a atacantes remotos provocar una denegación de servicio (trampa) a través de vectores involucrados "Grupo especial y enumeración de usuarios" ("special... • ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2010-3196
https://notcve.org/view.php?id=CVE-2010-3196
31 Aug 2010 — IBM DB2 9.7 before FP2, when AUTO_REVAL is IMMEDIATE, allows remote authenticated users to cause a denial of service (loss of privileges) to a view owner by defining a dependent view. IBM DB2 v9.7 anterior a FP2, cuando AUTO_REVAL está IMMEDIATE, permite a usuarios autenticados remotamente provocar una denegación de servicio (pérdida de privilegios) de una vista propietario mediante definición a una vista dependiente. • http://www-01.ibm.com/support/docview.wss?uid=swg1IC67008 • CWE-264: Permissions, Privileges, and Access Controls •