CVSS: 7.2EPSS: 0%CPEs: 18EXPL: 0CVE-2007-1089
https://notcve.org/view.php?id=CVE-2007-1089
IBM DB2 Universal Database (UDB) 9.1 GA through 9.1 FP1 allows local users with table SELECT privileges to perform unauthorized UPDATE and DELETE SQL commands via unknown vectors. IBM DB2 Universal Database (UDB) 9.1 GA hasta 9.1 FP1 permite a usuarios locales con privilegios en la tabla SELECT realizar los comandos no autorizados SQL: UPDATE y DELETEa través de vectores desconocidos. • http://secunia.com/advisories/24283 http://www-1.ibm.com/support/docview.wss?uid=swg1JR25941 http://www.attrition.org/pipermail/vim/2007-August/001765.html http://www.vupen.com/english/advisories/2007/0721 •
CVSS: 5.0EPSS: 6%CPEs: 13EXPL: 0CVE-2006-6638
https://notcve.org/view.php?id=CVE-2006-6638
IBM DB2 8.1 before FixPak 14 allows remote attackers to cause a denial of service via a crafted SQLJRA packet, which causes a NULL pointer dereference in the sqle_db2ra_as_recvrequest function in DB2ENGN.DLL, a different issue than CVE-2006-4257. IBM DB2 8.1 anterior a FixPak 14 permite a atacantes remotos provocar una denegación de servicio mediante un paquete SQLJRA artesanal, lo cual provoca una referencia a un puntero NULL en la función sqle_db2ra_as_recvrequest en DB2ENGN.DLL, un asunto diferente que CVE-2006-4257. • http://secunia.com/advisories/23397 http://www-1.ibm.com/support/docview.wss?uid=swg1IY91847 http://www.appsecinc.com/resources/alerts/db2/2006-11-30.shtml http://www.securityfocus.com/bid/21646 •
CVSS: 5.0EPSS: 2%CPEs: 13EXPL: 0CVE-2006-3066
https://notcve.org/view.php?id=CVE-2006-3066
Buffer overflow in the TCP/IP listener in IBM DB2 Universal Database (UDB) before 8.1 FixPak 12 allows remote attackers to cause a denial of service (application crash) via a long MGRLVLLS message inside of an EXCSAT message when establishing a connection. Desbordamiento de búfer en la escucha de TCP / IP en IBM DB2 Universal Database (UDB), anterior a v8.1 FixPak 12 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un mensaje MGRLVLLS mucho tiempo dentro de un mensaje de EXCSAT al establecer una conexión. • http://secunia.com/advisories/20579 http://www-1.ibm.com/support/docview.wss?uid=swg1IY84096 http://www.osvdb.org/29861 http://www.securityfocus.com/archive/1/445297/100/0/threaded http://www.securityfocus.com/bid/18428 http://www.vupen.com/english/advisories/2006/2332 •
CVSS: 10.0EPSS: 0%CPEs: 7EXPL: 0CVE-2005-0417
https://notcve.org/view.php?id=CVE-2005-0417
Unknown "high risk" vulnerability in DB2 Universal Database 8.1 and earlier has unknown impact and attack vectors. NOTE: due to the delayed disclosure of details for this issue, this candidate may be SPLIT in the future. In addition, this may be a duplicate of other issues as reported by the vendor. Vulnerabilidad desconocida de "alto riesgo" en DB2 Universal Database 8.1 y anteriores con impacto y vectores de ataque desconocidos. • http://marc.info/?l=bugtraq&m=110801212422825&w=2 http://www.ngssoftware.com/advisories/db2-09-05-05.htm http://www.securityfocus.com/bid/12508 •
CVSS: 7.2EPSS: 0%CPEs: 8EXPL: 3CVE-2003-1052 – IBM DB2 - Shared Library Injection
https://notcve.org/view.php?id=CVE-2003-1052
IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs. IBM DB2 7.1 y 8.1 permite al usuario bin ganar privilegios de root modificando las librerías compartidas usadas por programas con setuid de root. • https://www.exploit-db.com/exploits/22989 http://www.securityfocus.com/archive/1/331904 http://www.securityfocus.com/bid/8346 https://exchange.xforce.ibmcloud.com/vulnerabilities/12826 •