CVSS: 7.8EPSS: 47%CPEs: 1EXPL: 1CVE-2004-0795 – IBM DB2 Db2rcmd.exe Command Execution
https://notcve.org/view.php?id=CVE-2004-0795
20 Aug 2004 — DB2 8.1 remote command server (DB2RCMD.EXE) executes the db2rcmdc.exe program as the db2admin administrator, which allows local users to gain privileges via the DB2REMOTECMD named pipe. El servidor de órdenes remoto de DB2 8.1 (DB2RCMD.EXE) ejecuta el programa db2rcmdc.exe como el adminstrador db2admin, lo que permite a usuarios locales ganar privilegios mediante la tubería con nombre DB2REMOTECMD. • https://packetstorm.news/files/id/180775 •
CVSS: 7.8EPSS: 1%CPEs: 2EXPL: 1CVE-2003-0898 – IBM DB2 db2job - File Overwrite
https://notcve.org/view.php?id=CVE-2003-0898
28 Oct 2003 — IBM DB2 7.2 before FixPak 10a, and earlier versions including 7.1, allows local users to overwrite arbitrary files and gain privileges via a symlink attack on (1) db2job and (2) db2job2. IBM DB2 anteriores a FixPak 10a, y versiones anteriores incluyendo la 7.1, permite a usuarios locales sobreescribir ficheros arbitrarios y ganar privilegios mediante un ataque de enlaces simbólicos sobre d2job o db2job2. • https://www.exploit-db.com/exploits/22988 •
CVSS: 8.4EPSS: 1%CPEs: 1EXPL: 0CVE-2003-0837
https://notcve.org/view.php?id=CVE-2003-0837
08 Oct 2003 — Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 for Windows, before Fixpak 10a, allows attackers with "Connect" privileges to execute arbitrary code via the INVOKE command. Desbordamiento de búfer basado en la pila en IBM DB2 Universal Data Base 7.2 para Windows anteriores a Fixpak 10a permite a atacantes con privilegio de "Connect" ejecutar código arbitrario mediante el comando INVOKE. • http://marc.info/?l=bugtraq&m=106503709914622&w=2 •
CVSS: 9.8EPSS: 1%CPEs: 2EXPL: 0CVE-2003-0836
https://notcve.org/view.php?id=CVE-2003-0836
08 Oct 2003 — Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 before Fixpak 10 and 10a, and 8.1 before Fixpak 2, allows attackers with "Connect" privileges to execute arbitrary code via a LOAD command. Desbordamiento de búfer basado en la pila en IBM DB2 Universal Data Base 7.2 anteriores a Fixpak 10 y 10a, y 8.1 anteriores a Fixpak 2 permite a atacantes con privilegios "connect" ejecutar código arbitrario mediante un comando LOAD. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2003-0836 •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2003-0827
https://notcve.org/view.php?id=CVE-2003-0827
23 Sep 2003 — The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial of service (crash) via a long packet to UDP port 523. El servicio de descubierta DB2 de IBM DB2 anteriores a FixPak 10a permite a atacantes remotos causar una denegación de servicio (caída) mediante una paquete largo al puerto UDP 523. • http://marc.info/?l=bugtraq&m=106399616919636&w=2 •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 2CVE-2003-0759 – IBM DB2 - Universal Database 7.2 'db2licm' Local Overflow
https://notcve.org/view.php?id=CVE-2003-0759
19 Sep 2003 — Buffer overflow in db2licm in IBM DB2 Universal Data Base 7.2 before Fixpak 10a allows local users to gain root privileges via a long command line argument. Desbordamiento de búfer en db2licm en IBM DB2 Universal Data Base 7.2 anteriores a Fixpak 10a pemite a usuarios locales obtener privilegios de root mediante un argumento de línea de comandos largo. • https://www.exploit-db.com/exploits/106 •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 2CVE-2003-0758 – IBM DB2 db2dart - Buffer Overflow
https://notcve.org/view.php?id=CVE-2003-0758
19 Sep 2003 — Buffer overflow in db2dart in IBM DB2 Universal Data Base 7.2 before Fixpak 10 allows local users to gain root privileges via a long command line argument. Desbordamiento de búfer en db2dart en IMB DB2 Universal Database 7.2 anteriores a Fixpak 10 permite a usuarios locales ganar privilegios de root mediante un argumento de línea de comandos largo. • https://www.exploit-db.com/exploits/23112 •
CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0CVE-2001-1143
https://notcve.org/view.php?id=CVE-2001-1143
11 Jul 2001 — IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6790, or (2) db2jds.exe on port 6789. • http://www.iss.net/security_center/static/6832.php •
CVSS: 9.8EPSS: 7%CPEs: 2EXPL: 2CVE-2001-0051 – IBM DB2 - Universal Database for Linux 6.1/Windows NT 6.1 Known Default Password
https://notcve.org/view.php?id=CVE-2001-0051
02 Feb 2001 — IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote attackers to gain access to the database. • https://www.exploit-db.com/exploits/20472 •
CVSS: 6.5EPSS: 1%CPEs: 2EXPL: 3CVE-2001-0052 – IBM DB2 - Universal Database for Windows NT 6.1/7.1 SQL Denial of Service
https://notcve.org/view.php?id=CVE-2001-0052
02 Feb 2001 — IBM DB2 Universal Database version 6.1 allows users to cause a denial of service via a malformed query. • https://www.exploit-db.com/exploits/20470 •