IBM Db2 Universal Database vulnerabilities, page 2
66 vulnerabilities
Known vulnerabilities in IBM Db2 Universal Database, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2007-5758ibmdb2_universal_database
EPSS score0.57%
Stack-based buffer overflow in db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to execute arbitrary code via a long DASPROF environment variable.CVE-2007-5664ibmdb2_universal_databaseEPSS score0.34%
db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to overwrite arbitrary files via a symlink attack on files used for initialization.CVE-2007-6051ibmdb2_universal_databaseEPSS score1.54%
IBM DB2 UDB 9.1 before Fixpak 4 assigns incorrect privileges to the (1) DB2ADMNS and (2) DB2USERS alternative groups, which has unknown impact. NOTE: the vendor description of this issue is too vague to be certain that it is security-related.CVE-2007-6045ibmdb2_universal_databaseEPSS score1.83%
Unspecified vulnerability in (1) DB2WATCH and (2) DB2FREEZE in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors.CVE-2007-6049ibmdb2_universal_databaseEPSS score0.35%
Unspecified vulnerability in the SSL LOAD GSKIT action in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors, involving a call to dlopen when the effective uid is root.CVE-2007-6052ibmdb2_universal_databaseEPSS score1.31%
IBM DB2 UDB 9.1 before Fixpak 4 does not properly perform vector aggregation, which might allow attackers to cause a denial of service (divide-by-zero error and DBMS crash), related to an "overflow." NOTE: the vendor description of this issue is too vague to be certain that it is security-related.CVE-2007-6046ibmdb2_universal_databaseEPSS score0.31%
Unspecified vulnerability in unspecified setuid programs in IBM DB2 UDB 9.1 before Fixpak 4 allows local users to have an unknown impact.CVE-2007-6053ibmdb2_universal_databaseEPSS score1.27%
IBM DB2 UDB 9.1 before Fixpak 4 does not properly handle use of large numbers of file descriptors, which might allow attackers to have an unknown impact involving "memory corruption." NOTE: the vendor description of this issue is too vague to be certain that it is security-related.CVE-2007-6050ibmdb2_universal_databaseEPSS score0.32%
Unspecified vulnerability in DB2LICD in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors, related to creation of an "insecure directory."CVE-2007-6047ibmdb2_universal_databaseEPSS score2.00%
Unspecified vulnerability in the DB2DART tool in IBM DB2 UDB 9.1 before Fixpak 4 allows attackers to execute arbitrary commands as the DB2 instance owner, related to invocation of TPUT by DB2DART.CVE-2007-6048ibmdb2_universal_databaseEPSS score1.77%
IBM DB2 UDB 9.1 before Fixpak 4 uses incorrect permissions on ACLs for DB2NODES.CFG, which has unknown impact and attack vectors. NOTE: the vendor description of this issue is too vague to be certain that it is security-related.CVE-2001-1143ibmdb2_universal_databaseEPSS score1.63%
IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6790, or (2) db2jds.exe on port 6789.CVE-2001-0051ibmdb2_universal_databaseEPSS score2.79%
IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote attackers to gain access to the database.CVE-2001-0052ibmdb2_universal_databaseEPSS score1.21%
IBM DB2 Universal Database version 6.1 allows users to cause a denial of service via a malformed query.CVE-2005-0417ibmdb2_universal_databaseEPSS score1.65%
Unknown "high risk" vulnerability in DB2 Universal Database 8.1 and earlier has unknown impact and attack vectors. NOTE: due to the delayed disclosure of details for this issue, this candidate may be SPLIT in the future. In addition, this may be a duplicate of other issues as reported by the vendor.CVE-2005-4863ibmdb2_universal_databaseEPSS score0.48%
Stack-based buffer overflow in db2fmp in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long parameter.CVE-2005-4864ibmdb2_universal_databaseEPSS score0.48%
Stack-based buffer overflow in libdb2.so in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long DB2LPORT environment variable.CVE-2005-4735ibmdb2_universal_databaseEPSS score1.59%
IBM DB2 Universal Database (UDB) 810 before 8.1 FP10 allows remote authenticated users to cause a denial of service (application crash) via (1) certain equality predicates that trigger self-removal, aka IY70808; and (2) a query with more than 32000 elements in the IN-list, aka LI70817.CVE-2005-4865ibmdb2_universal_databaseEPSS score5.84%
Stack-based buffer overflow in call in IBM DB2 7.x and 8.1 allows remote attackers to execute arbitrary code via a long libname.CVE-2005-4738ibmdb2_universal_databaseEPSS score1.25%
IBM DB2 Universal Database (UDB) 810 before ESE AIX 5765F4100 does not ensure that a user has execute privileges before permitting object creation based on routines, which allows remote authenticated users to gain privileges.