Ibm

Db2

292 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2011-0731

  • EPSS 9.98%
  • Veröffentlicht 01.02.2011 18:00:03
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Buffer overflow in the DB2 Administration Server (DAS) component in IBM DB2 9.1 before FP10, 9.5 before FP7, and 9.7 before FP3 on Linux, UNIX, and Windows allows remote attackers to execute arbitrary code via unspecified vectors.

7.2

CVE-2010-3733

  • EPSS 0.04%
  • Veröffentlicht 05.10.2010 18:00:33
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Engine Utilities component in IBM DB2 UDB 9.5 before FP6a uses world-writable permissions for the sqllib/cfg/db2sprf file, which might allow local users to gain privileges by modifying this file.

5

CVE-2010-3734

  • EPSS 0.23%
  • Veröffentlicht 05.10.2010 18:00:33
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Install component in IBM DB2 UDB 9.5 before FP6a on Linux, UNIX, and Windows enforces an unintended limit on password length, which makes it easier for attackers to obtain access via a brute-force attack.

2.1

CVE-2010-3735

  • EPSS 0.41%
  • Veröffentlicht 05.10.2010 18:00:33
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The "Query Compiler, Rewrite, Optimizer" component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted query involving certain UNION ALL views, leading to an indefinitely large...

4

CVE-2010-3736

  • EPSS 0.41%
  • Veröffentlicht 05.10.2010 18:00:33
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a, when the connection concentrator is enabled, allows remote authenticated users to cause a denial of service (heap memory consumption) by using a different code page...

3.5

CVE-2010-3737

  • EPSS 0.38%
  • Veröffentlicht 05.10.2010 18:00:33
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (heap memory consumption) by executing a (1) user-defined function (UDF) or (2) stored procedure while...

5

CVE-2010-3738

  • EPSS 0.25%
  • Veröffentlicht 05.10.2010 18:00:33
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Security component in IBM DB2 UDB 9.5 before FP6a logs AUDIT events by using a USERID and an AUTHID value corresponding to the instance owner, instead of a USERID and an AUTHID value corresponding to the logged-in user account, which makes it eas...

4

CVE-2010-3740

  • EPSS 0.41%
  • Veröffentlicht 05.10.2010 18:00:33
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Net Search Extender (NSE) implementation in the Text Search component in IBM DB2 UDB 9.5 before FP6a does not properly handle an alphanumeric Fuzzy search, which allows remote authenticated users to cause a denial of service (memory consumption a...

10

CVE-2010-3731

  • EPSS 43.42%
  • Veröffentlicht 05.10.2010 18:00:32
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Stack-based buffer overflow in the validateUser implementation in the com.ibm.db2.das.core.DasSysCmd function in db2dasrrm in the DB2 Administration Server (DAS) component in IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP3 allows remote ...

3.5

CVE-2010-3732

  • EPSS 0.38%
  • Veröffentlicht 05.10.2010 18:00:32
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The DRDA Services component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (database server ABEND) by using the client CLI on Linux, UNIX, or Windows for executing a prepared statement with a large numbe...