Page 3 of 32 results (0.003 seconds)

CVSS: 7.5EPSS: 0%CPEs: 119EXPL: 0

CVE-2008-3856

https://notcve.org/view.php?id=CVE-2008-3856

The routine infrastructure component in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP1 on Unix and Linux does not change the ownership of the db2fmp process, which has unknown impact and attack vectors. El componente routine infrastructure en DB2 de IBM versión 8 anterior a FP17, versión 9.1 anterior a FP5 y versión 9.5 anterior a FP1, en Unix y Linux, no cambia la propiedad del proceso db2fmp, que presenta un impacto y vectores de ataque desconocidos. • ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT http://secunia.com/advisories/29784 http://secunia.com/advisories/31787 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ19155 http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20350 http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20352 http://www-1.ibm.com/support/docview.wss?uid= • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 6.9EPSS: 0%CPEs: 3EXPL: 1

CVE-2007-5758

https://notcve.org/view.php?id=CVE-2007-5758

Stack-based buffer overflow in db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to execute arbitrary code via a long DASPROF environment variable. Desbordamiento de búfer basado en pila en db2dasrrm del DB2 Administration Server (DAS) en IBM DB2 Universal Database 9.5 anterior a Fix Pack 1, 9.1 anterior a Fix Pack 4a, y 8 anterior a FixPak 16; permite a usuarios locales ejecutar código de su elección mediante una larga variable de entorno DASPROF. • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=689 http://secunia.com/advisories/29784 http://www.securityfocus.com/bid/27870 http://www.securitytracker.com/id?1019853 http://www.vupen.com/english/advisories/2008/1237/references https://exchange.xforce.ibmcloud.com/vulnerabilities/41847 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.9EPSS: 0%CPEs: 3EXPL: 0

CVE-2007-5664

https://notcve.org/view.php?id=CVE-2007-5664

db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to overwrite arbitrary files via a symlink attack on files used for initialization. db2dasrrm en DB2 Administration Server (DAS) de IBM DB2 Universal Database 9.5 anterior al Fix Pack 1, 9.1 anterior al Fix Pack 4a, y 8 anterior al FixPak 16, permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico sobre archivos usados para su inicialización. • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=688 http://secunia.com/advisories/29784 http://www.securityfocus.com/bid/27870 http://www.securitytracker.com/id?1019852 http://www.vupen.com/english/advisories/2008/1237/references https://exchange.xforce.ibmcloud.com/vulnerabilities/41848 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •

CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0

CVE-2007-6052

https://notcve.org/view.php?id=CVE-2007-6052

IBM DB2 UDB 9.1 before Fixpak 4 does not properly perform vector aggregation, which might allow attackers to cause a denial of service (divide-by-zero error and DBMS crash), related to an "overflow." NOTE: the vendor description of this issue is too vague to be certain that it is security-related. IBM DB2 UDB 9.1 anterior a Fixpak 4 no realiza adecuadamente la suma de vector, lo cual permite a atacantes provocar denegación de servicio (error de división por zero y caida DBMS), relacionad con un "desbordamiento". NOTA: la descripción del vendedor de este asunto es muy vaga como para afirmar que se trata de un asunto de seguridad. • http://www-1.ibm.com/support/docview.wss?uid=swg1IZ08205 http://www-1.ibm.com/support/docview.wss?uid=swg21255607 http://www.securityfocus.com/bid/26450 http://www.vupen.com/english/advisories/2007/3867 •

CVSS: 7.2EPSS: 0%CPEs: 4EXPL: 0

CVE-2007-6050

https://notcve.org/view.php?id=CVE-2007-6050

Unspecified vulnerability in DB2LICD in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors, related to creation of an "insecure directory." Vulnerabilidad no especificada en DB2LICD en IBM DB2 UDB 9.1 anterior a Fixpak 4 tiene un impacto desconocido y vectores de ataque, relacionado con la creación de un "directorio no seguro". • http://www-1.ibm.com/support/docview.wss?uid=swg1IZ03881 http://www-1.ibm.com/support/docview.wss?uid=swg21255607 http://www.securityfocus.com/bid/26450 http://www.vupen.com/english/advisories/2007/3867 • CWE-264: Permissions, Privileges, and Access Controls •