Page 2 of 8 results (0.003 seconds)

CVSS: 6.5EPSS: 2%CPEs: 35EXPL: 0

CVE-2008-3852

https://notcve.org/view.php?id=CVE-2008-3852

Unspecified vulnerability in the CLR stored procedure deployment from IBM Database Add-Ins for Visual Studio in the Visual Studio Net component in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 2 allows remote authenticated users to execute arbitrary code via unknown vectors. Una vulnerabilidad no especificada en la implementación del procedimiento almacenado CLR de Database Add-Ins de IBM para Visual Studio en el componente Visual Studio Net en DB2 de IBM versión 9.1 anterior a Fixpak 5 y versión 9.5 anterior a Fixpak 2, permite a los usuarios autenticados remotos ejecutar código arbitrario por medio de vectores desconocidos. • http://secunia.com/advisories/30558 http://secunia.com/advisories/31635 http://www-1.ibm.com/support/docview.wss?uid=swg1JR28431 http://www-1.ibm.com/support/docview.wss?uid=swg1JR28432 http://www-1.ibm.com/support/docview.wss?uid=swg21255607 http://www-1.ibm.com/support/docview.wss?uid=swg21293566 http://www.securityfocus.com/archive/1/496405/100/0/threaded http://www.securityfocus.com/bid/29601 http://www.securitytracker.com/id? • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 6.9EPSS: 0%CPEs: 3EXPL: 1

CVE-2007-5758

https://notcve.org/view.php?id=CVE-2007-5758

Stack-based buffer overflow in db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to execute arbitrary code via a long DASPROF environment variable. Desbordamiento de búfer basado en pila en db2dasrrm del DB2 Administration Server (DAS) en IBM DB2 Universal Database 9.5 anterior a Fix Pack 1, 9.1 anterior a Fix Pack 4a, y 8 anterior a FixPak 16; permite a usuarios locales ejecutar código de su elección mediante una larga variable de entorno DASPROF. • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=689 http://secunia.com/advisories/29784 http://www.securityfocus.com/bid/27870 http://www.securitytracker.com/id?1019853 http://www.vupen.com/english/advisories/2008/1237/references https://exchange.xforce.ibmcloud.com/vulnerabilities/41847 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.9EPSS: 0%CPEs: 3EXPL: 0

CVE-2007-5664

https://notcve.org/view.php?id=CVE-2007-5664

db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to overwrite arbitrary files via a symlink attack on files used for initialization. db2dasrrm en DB2 Administration Server (DAS) de IBM DB2 Universal Database 9.5 anterior al Fix Pack 1, 9.1 anterior al Fix Pack 4a, y 8 anterior al FixPak 16, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico sobre archivos usados para su inicialización. • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=688 http://secunia.com/advisories/29784 http://www.securityfocus.com/bid/27870 http://www.securitytracker.com/id?1019852 http://www.vupen.com/english/advisories/2008/1237/references https://exchange.xforce.ibmcloud.com/vulnerabilities/41848 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •