Page 3 of 67 results (0.008 seconds)

CVSS: 5.0EPSS: 0%CPEs: 43EXPL: 0

CVE-2012-2196

https://notcve.org/view.php?id=CVE-2012-2196

IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to read arbitrary XML files via the (1) GET_WRAP_CFG_C or (2) GET_WRAP_CFG_C2 stored procedure. IBM DB2 v9.1 antes de FP12, v9.5 hasta el FP9, v9.7 hasta el FP6, v9.8 hasta el FP5 y v10.1 permite a atacantes remotos leer archivos XML de su elección a través de los procedimientos almacenados (1) GET_WRAP_CFG_C o (2) GET_WRAP_CFG_C2. • http://secunia.com/advisories/49919 http://www-01.ibm.com/support/docview.wss?uid=swg1IC84614 http://www-01.ibm.com/support/docview.wss?uid=swg1IC84712 http://www-01.ibm.com/support/docview.wss?uid=swg1IC84748 http://www-01.ibm.com/support/docview.wss?uid=swg1IC84750 http://www-01.ibm.com/support/docview.wss? • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 5.0EPSS: 7%CPEs: 38EXPL: 0

CVE-2012-0710

https://notcve.org/view.php?id=CVE-2012-0710

IBM DB2 9.1 before FP11, 9.5 before FP9, 9.7 before FP5, and 9.8 before FP4 allows remote attackers to cause a denial of service (daemon crash) via a crafted Distributed Relational Database Architecture (DRDA) request. IBM DB2 9.1 antes de FP11, 9.5 antes de FP9, 9.7 antes de FP5, y 9.8 antes de FP4 permite a atacantes remotos causar una denegación de servicio (caída de demonio) a través de una solicitud Distributed Relational Database Architecture (DRDA) modificada. • http://www-01.ibm.com/support/docview.wss?uid=swg1IC76781 http://www-01.ibm.com/support/docview.wss?uid=swg1IC76899 http://www-01.ibm.com/support/docview.wss?uid=swg1IC76901 http://www-01.ibm.com/support/docview.wss?uid=swg1IC76902 http://www-01.ibm.com/support/docview.wss? • CWE-20: Improper Input Validation •

CVSS: 7.5EPSS: 13%CPEs: 41EXPL: 0

CVE-2012-0711

https://notcve.org/view.php?id=CVE-2012-0711

Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow. Un error de entero sin signo en el proceso db2dasrrm del servidor de administración de DB2 (DAS) en IBM DB2 v9.1 hasta FP11, v9.5 antes de vFP9, y v9.7 hasta FP5 para UNIX permite a atacantes remotos ejecutar código de su elección a través de una solicitud modificada a mano que ocasiona un desbordamiento del búfer basado en memoria dinámica. • http://www-01.ibm.com/support/docview.wss?uid=swg1IC80561 http://www-01.ibm.com/support/docview.wss?uid=swg1IC80728 http://www-01.ibm.com/support/docview.wss?uid=swg1IC80729 http://www-01.ibm.com/support/docview.wss?uid=swg21588093 http://www.securityfocus.com/bid/77826 https://exchange.xforce.ibmcloud.com/vulnerabilities/73495 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14842 • CWE-189: Numeric Errors •

CVSS: 1.5EPSS: 0%CPEs: 4EXPL: 0

CVE-2011-1373

https://notcve.org/view.php?id=CVE-2011-1373

Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager (STMM) feature and the AUTOMATIC DATABASE_MEMORY setting are configured, allows local users to cause a denial of service (daemon crash) via unknown vectors. Vulnerabilidad no especificada en IBM DB2 v9.7 antes de FP5 en UNIX, cuando las características Self Tuning Memory Manager (STMM) y AUTOMATIC DATABASE_MEMORY están configuradas, permite a usuarios locales provocar una denegación de servicio (caída del demonio) a través de vectores desconocidos. • http://www-01.ibm.com/support/docview.wss?uid=swg1IC70473 https://exchange.xforce.ibmcloud.com/vulnerabilities/71043 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14720 •

CVSS: 6.5EPSS: 0%CPEs: 16EXPL: 0

CVE-2011-1846

https://notcve.org/view.php?id=CVE-2011-1846

IBM DB2 9.5 before FP7 and 9.7 before FP4 on Linux, UNIX, and Windows does not properly revoke role membership from groups, which allows remote authenticated users to execute non-DDL statements by leveraging previous inherited possession of a role, a different vulnerability than CVE-2011-0757. NOTE: some of these details are obtained from third party information. IBM DB2 v9.5 anterior a FP7 y v9.7 anterior a FP4 en Linux, UNIX y Windows no revoca correctamente la pertenencia a grupos, lo que permite a usuarios remotos autenticados ejecutar instrucciones non-DDL aprovechándose de la posesión heredada del rol anterior, una vulnerabilidad diferente de CVE-2011-0757. NOTA: algunos de estos detalles han sido obtenidos de información de terceros. • http://secunia.com/advisories/44229 http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IC71263 http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IC71375 http://www-01.ibm.com/support/docview.wss?uid=swg1IC71263 http://www-01.ibm.com/support/docview.wss?uid=swg1IC71375 http://www.securityfocus.com/bid/47525 http://www.vupen.com/english/advisories/2011/1083 https://exchange.xforce.ibmcloud.com/vulnerabilities/66980 https://oval.cisecurity.org/repository/search/def • CWE-264: Permissions, Privileges, and Access Controls •