DU
Product
Db2 Universal Database
66
CVEs
0
On KEV
7.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Db2 Universal Database to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2005-3643 | – | Nov 16 | IBM DB2 Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account without supplying… Affected: 7.1; 7.2; 8.0; 8.1; 8.1.4; 8.1.5; +8 more |
| CVE-2005-0417 | – | Apr 27 | Unknown "high risk" vulnerability in DB2 Universal Database 8.1 and earlier has unknown impact and attack vectors Affected: 6.0; 7.0; 7.1; 7.2; 8.0; 8.1; +1 more |
| CVE-2004-0795 | – | Oct 20 | DB2 8.1 remote command server (DB2RCMD.EXE) executes the db2rcmdc.exe program as the db2admin administrator, which allows local users to gain privileges via the DB2REMOTECMD named… Affected: 8.1 |
| CVE-2002-1583 | – | Sep 28 | Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file… Affected: 6.0; 7.0; 7.1; 7.2; 8.2 |
| CVE-2003-1052 | – | Sep 28 | IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs Affected: 6.0; 7.0; 7.1; 7.2; 8.0; 8.1; +1 more |
| CVE-2003-1049 | – | Sep 28 | IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions (777), which allows local users to modify or delete certain DB2 files Affected: 7.0; 8.0 |
| CVE-2004-1372 | – | Sep 1 | Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long… Affected: 7.0; 7.1; 7.2; 8.1 |
| CVE-2003-0898 | – | Nov 17 | IBM DB2 7.2 before FixPak 10a, and earlier versions including 7.1, allows local users to overwrite arbitrary files and gain privileges via a symlink attack on (1) db2job and (2)… Affected: through 8.0; 7.1 |
| CVE-2003-0836 | – | Nov 17 | Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 before Fixpak 10 and 10a, and 8.1 before Fixpak 2, allows attackers with "Connect" privileges to execute arbitrary… Affected: 7.2; 8.1 |
| CVE-2003-0837 | – | Nov 17 | Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 for Windows, before Fixpak 10a, allows attackers with "Connect" privileges to execute arbitrary code via the INVOKE… Affected: 7.2 |
| CVE-2003-0758 | – | Oct 6 | Buffer overflow in db2dart in IBM DB2 Universal Data Base 7.2 before Fixpak 10 allows local users to gain root privileges via a long command line argument Affected: 7.2 |
| CVE-2003-0759 | – | Oct 6 | Buffer overflow in db2licm in IBM DB2 Universal Data Base 7.2 before Fixpak 10a allows local users to gain root privileges via a long command line argument Affected: 7.2 |
| CVE-2003-0827 | – | Oct 6 | The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial of service (crash) via a long packet to UDP port 523 Affected: 7.1; 7.2 |
| CVE-2001-1143 | – | Jul 11 | IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6790, or (2) db2jds.exe on port 6789 Affected: 7.0 |
| CVE-2001-0052 | – | Feb 16 | IBM DB2 Universal Database version 6.1 allows users to cause a denial of service via a malformed query Affected: 6.1; 7.1 |
| CVE-2001-0051 | – | Feb 16 | IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote attackers to gain access to the database Affected: 6.1; 6.1 |