CVSS: 10.0EPSS: 24%CPEs: 1EXPL: 0CVE-2007-2582 – IBM DB2 DB2JDS Multiple Vulnerabilities
https://notcve.org/view.php?id=CVE-2007-2582
Multiple buffer overflows in the DB2 JDBC Applet Server (DB2JDS) service in IBM DB2 9.x and earlier allow remote attackers to (1) execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via (2) an invalid LANG parameter or (2) a long packet that generates a "MemTree overflow." Múltiples desbordamientos de búfer en el servicio DB2 JDBC Applet Server (DB2JDS) en IBM DB2 versión 9.x y anteriores, permiten que los atacantes remotos (1) ejecuten un código arbitrario por medio de un paquete creado para el servicio DB2JDS en tcp/6789; y causa una denegación de servicio por medio de (2) un parámetro LANG no válido o (2) un paquete largo que genera un "MemTree overflow." The most severe of these vulnerabilities allows remote attackers to execute arbitrary code on vulnerable installations of IBM DB2 Universal Database. Authentication is not required to exploit these vulnerabilities. The first flaw exists in the DB2JDS service listening on TCP port 6789. A specially crafted packet is improperly processed by an internal sprintf() call resulting in a stack overflow which can be leveraged to execute arbitrary code. Additionally, two DoS condition vulnerabilities were discovered. • http://osvdb.org/40973 http://osvdb.org/40975 http://secunia.com/advisories/25148 http://www-1.ibm.com/support/search.wss?rs=0&q=IY97750&apar=only http://www.securityfocus.com/archive/1/482024/100/0/threaded http://www.securityfocus.com/bid/23890 http://www.securityfocus.com/bid/26010 http://www.securitytracker.com/id?1018029 http://www.securitytracker.com/id?1018801 http://www.vupen.com/english/advisories/2007/1707 http://www.zerodayinitiative.com/advisories/ZDI • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 4.4EPSS: 0%CPEs: 10EXPL: 0CVE-2007-1228
https://notcve.org/view.php?id=CVE-2007-1228
IBM DB2 UDB 8.2 before Fixpak 7 (aka fixpack 14), and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to access certain unauthorized directories. IBM DB2 UDB 8.2 anterior a ixpak 7 (también conocido como fixpack 14), y DB2 9 anterior a Fix Pack 2, sobre UNIX permite al usuario "cercano" acceder a ciertos directorios no autorizados. • http://secunia.com/advisories/24387 http://www-1.ibm.com/support/docview.wss?uid=swg1IY86711 http://www-1.ibm.com/support/docview.wss?uid=swg1IY87492 http://www.securityfocus.com/bid/22729 http://www.securitytracker.com/id?1017731 • CWE-287: Improper Authentication •
CVSS: 7.2EPSS: 0%CPEs: 20EXPL: 0CVE-2007-1087
https://notcve.org/view.php?id=CVE-2007-1087
IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables that trigger a heap-based buffer overflow. IBM DB2 8.x anterior a 8.1 FixPak 15 y 9.1 anterior a Fix Pack 2 no finaliza adecuadamente ciertas cadenas de entrada, lo cual permite a usuarios locales ejecutar código de su elección a través de variables de entorno no especificadas que disparan un desbordamiento de búfer basado en pila. • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=481 http://osvdb.org/40970 http://www-1.ibm.com/support/docview.wss?uid=swg21255747 http://www.attrition.org/pipermail/vim/2007-August/001765.html http://www.securityfocus.com/bid/22677 https://exchange.xforce.ibmcloud.com/vulnerabilities/32651 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.2EPSS: 0%CPEs: 20EXPL: 0CVE-2007-1088
https://notcve.org/view.php?id=CVE-2007-1088
Stack-based buffer overflow in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allows local users to execute arbitrary code via a long string in unspecified environment variables. Desbordamiento de búfer basado en pila en IBM DB2 8.x anterior a 8.1 FixPak 15 y 9.1 anterior a Fix Pack 2 permite a usuarios locales ejecutar código de su elección a través de una cadenas largas en variables no especificadas de entorno. • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=481 http://osvdb.org/40971 http://www-1.ibm.com/support/docview.wss?uid=swg21255747 http://www.attrition.org/pipermail/vim/2007-August/001765.html http://www.securityfocus.com/bid/22677 https://exchange.xforce.ibmcloud.com/vulnerabilities/32652 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 4.4EPSS: 0%CPEs: 2EXPL: 0CVE-2007-1027
https://notcve.org/view.php?id=CVE-2007-1027
Certain setuid DB2 binaries in IBM DB2 before 9 Fix Pack 2 for Linux and Unix allow local users to overwrite arbitrary files via a symlink attack on the DB2DIAG.LOG temporary file. Ciertos binarios setuid DB2 en IBM DB2 anterior a 9 Fix Pack 2 para Linux y Unix permite a usuarios locales sobrescribir ficheros mediante un ataque de enlaces simbólicos (symlink attack) en el fichero temporal DB2DIAG.LOG. • http://osvdb.org/34024 http://secunia.com/advisories/24213 http://www-1.ibm.com/support/docview.wss?uid=swg1IY94817 http://www.securityfocus.com/bid/22614 http://www.securitytracker.com/id?1017665 http://www.securitytracker.com/id?1017695 http://www.vupen.com/english/advisories/2007/0652 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •