CVSS: 7.5EPSS: 0%CPEs: 10EXPL: 0CVE-2008-4693
https://notcve.org/view.php?id=CVE-2008-4693
22 Oct 2008 — The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES." El componente SORT/LIST SERVICES en IBM DB2 v9.1 anterior a FP6 y v9.5 anterior a FP2 escribe información sensible en la salida del trazado (trace), lo que permite a atacantes obtener información sensible mediante la lectura de "PASSWORD-RELATED CONNECTION STRING K... • ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.5EPSS: 0%CPEs: 8EXPL: 0CVE-2008-4691
https://notcve.org/view.php?id=CVE-2008-4691
22 Oct 2008 — Unspecified vulnerability in the SQLNLS_UNPADDEDCHARLEN function in the New Compiler (aka Starburst derived compiler) component in the server in IBM DB2 9.1 before FP6 allows attackers to cause a denial of service (segmentation violation and trap) via unknown vectors. Vulnerabilidad sin especificar en la función SQLNLS_UNPADDEDCHARLEN en el componente New Compiler (también conocido como Starburst derived compiler) en el servidor en IBM DB2 v9.1 anterior a FP6, permite a atacantes remotos provocar una denega... • ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT •
CVSS: 9.0EPSS: 2%CPEs: 31EXPL: 0CVE-2008-1997
https://notcve.org/view.php?id=CVE-2008-1997
28 Apr 2008 — Unspecified vulnerability in the ADMIN_SP_C2 procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unknown vectors. NOTE: the ADMIN_SP_C issue is already covered by CVE-2008-0699. Vulnerabilidad no especificada en el procedimiento ADMIN_SP_C2 de IBM DB2 8 anterior a FP16, 9.1 anterior a FP4a, y 9.5 anterior a FP1; permite a usuarios autenticados en remoto ejecutar código de su elección mediante vectores desconocidos. NOTA: la ... • http://secunia.com/advisories/29022 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 8.5EPSS: 1%CPEs: 29EXPL: 0CVE-2008-1998
https://notcve.org/view.php?id=CVE-2008-1998
28 Apr 2008 — The NNSTAT (aka SYSPROC.NNSTAT) procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 on Windows allows remote authenticated users to overwrite arbitrary files via the log file parameter. El procedimiento NNSTAT (también conocido como SYSPROC.NNSTAT) en IBM DB2 8 versiones anteriores a FP16, 9.1 versiones anteriores a FP4a, y 9.5 versiones anteriores a FP1 en Windows permite a usuarios remotos autenticados sobrescribir ficheros de su elección a través del parámetro log file. • http://secunia.com/advisories/29022 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.5EPSS: 2%CPEs: 32EXPL: 0CVE-2008-1966
https://notcve.org/view.php?id=CVE-2008-1966
27 Apr 2008 — Multiple buffer overflows in the JAR file administration routines in the BSU JAVA subcomponent in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 allow remote authenticated users to cause a denial of service (instance crash) via a call to the (1) RECOVERJAR or (2) REMOVE_JAR procedure with a crafted parameter, related to (a) sqlj.install_jar and (b) sqlj.replace_jar. Múltiples desbordamientos de búfer en las rutinas de administración de archivos JAR en el subcomponente BSU JAVA en IBM DB2 versión... • http://osvdb.org/46268 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 9%CPEs: 2EXPL: 0CVE-2007-3676
https://notcve.org/view.php?id=CVE-2007-3676
12 Feb 2008 — IBM DB2 Universal Database (UDB) Administration Server (DAS) 8 before Fix Pack 16 and 9 before Fix Pack 4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via modified pointer values in unspecified remote administration requests, which triggers memory corruption or other invalid memory access. NOTE: this might be the same issue as CVE-2008-0698. El Servidor de Administración (DAS) de IBM DB2 Universal Database (UDB) en versión 8 anterior al Fix Pack 16 y versi... • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=654 • CWE-399: Resource Management Errors •
CVSS: 9.0EPSS: 8%CPEs: 24EXPL: 0CVE-2008-0699
https://notcve.org/view.php?id=CVE-2008-0699
12 Feb 2008 — Unspecified vulnerability in the ADMIN_SP_C procedure (SYSPROC.ADMIN_SP_C) in IBM DB2 UDB before 8.2 Fixpak 16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unspecified attack vectors. Vulnerabilidad no específica en el procedimiento ADMIN_SP_C (SYSPROC.ADMIN_SP_C) en DB2 UDB de IBM en versiones anteriores a la 8.2 Fixpak 16, versión 9.1 en versiones anteriores a la FP4a y versión 9.5 en versiones anteriores a laFP1 permite a usuarios autenticados remot... • ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT •
CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0CVE-2007-5652
https://notcve.org/view.php?id=CVE-2007-5652
23 Oct 2007 — IBM DB2 UDB 9.1 before Fixpak 4 does not properly manage storage of a list containing authentication information, which might allow attackers to cause a denial of service (instance crash) or trigger memory corruption. NOTE: the vendor description of this issue is too vague to be certain that it is security-related. IBM DB2 UDB versión 9.1 anterior a Fixpak 4, no administra apropiadamente el almacenamiento de una lista que contiene información de autenticación, lo que podría permitir a atacantes causar una d... • http://secunia.com/advisories/27177 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 7%CPEs: 1EXPL: 0CVE-2007-2582 – IBM DB2 DB2JDS Multiple Vulnerabilities
https://notcve.org/view.php?id=CVE-2007-2582
09 May 2007 — Multiple buffer overflows in the DB2 JDBC Applet Server (DB2JDS) service in IBM DB2 9.x and earlier allow remote attackers to (1) execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via (2) an invalid LANG parameter or (2) a long packet that generates a "MemTree overflow." Múltiples desbordamientos de búfer en el servicio DB2 JDBC Applet Server (DB2JDS) en IBM DB2 versión 9.x y anteriores, permiten que los atacantes remotos (1) ejecuten un código arbi... • http://osvdb.org/40973 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 4.4EPSS: 0%CPEs: 10EXPL: 0CVE-2007-1228
https://notcve.org/view.php?id=CVE-2007-1228
02 Mar 2007 — IBM DB2 UDB 8.2 before Fixpak 7 (aka fixpack 14), and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to access certain unauthorized directories. IBM DB2 UDB 8.2 anterior a ixpak 7 (también conocido como fixpack 14), y DB2 9 anterior a Fix Pack 2, sobre UNIX permite al usuario "cercano" acceder a ciertos directorios no autorizados. • http://secunia.com/advisories/24387 • CWE-287: Improper Authentication •