| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2010-3735 | 2.1 |
The "Query Compiler, Rewrite, Optimizer" component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted query involving certain UNION ALL views, leading to an indefinitely large
|
19-09-2017 - 01:31 | 05-10-2010 - 18:00 | |
| CVE-2010-3737 | 3.5 |
Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (heap memory consumption) by executing a (1) user-defined function (UDF) or (2) stored procedure while
|
19-09-2017 - 01:31 | 05-10-2010 - 18:00 | |
| CVE-2010-3738 | 5.0 |
The Security component in IBM DB2 UDB 9.5 before FP6a logs AUDIT events by using a USERID and an AUTHID value corresponding to the instance owner, instead of a USERID and an AUTHID value corresponding to the logged-in user account, which makes it eas
|
19-09-2017 - 01:31 | 05-10-2010 - 18:00 | |
| CVE-2010-3732 | 3.5 |
The DRDA Services component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (database server ABEND) by using the client CLI on Linux, UNIX, or Windows for executing a prepared statement with a large numbe
|
19-09-2017 - 01:31 | 05-10-2010 - 18:00 | |
| CVE-2010-3731 | 10.0 |
Stack-based buffer overflow in the validateUser implementation in the com.ibm.db2.das.core.DasSysCmd function in db2dasrrm in the DB2 Administration Server (DAS) component in IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP3 allows remote
|
19-09-2017 - 01:31 | 05-10-2010 - 18:00 | |
| CVE-2010-3734 | 5.0 |
The Install component in IBM DB2 UDB 9.5 before FP6a on Linux, UNIX, and Windows enforces an unintended limit on password length, which makes it easier for attackers to obtain access via a brute-force attack.
|
19-09-2017 - 01:31 | 05-10-2010 - 18:00 | |
| CVE-2010-3736 | 4.0 |
Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a, when the connection concentrator is enabled, allows remote authenticated users to cause a denial of service (heap memory consumption) by using a different code page
|
19-09-2017 - 01:31 | 05-10-2010 - 18:00 | |
| CVE-2010-3740 | 4.0 |
The Net Search Extender (NSE) implementation in the Text Search component in IBM DB2 UDB 9.5 before FP6a does not properly handle an alphanumeric Fuzzy search, which allows remote authenticated users to cause a denial of service (memory consumption a
|
19-09-2017 - 01:31 | 05-10-2010 - 18:00 | |
| CVE-2010-3733 | 7.2 |
The Engine Utilities component in IBM DB2 UDB 9.5 before FP6a uses world-writable permissions for the sqllib/cfg/db2sprf file, which might allow local users to gain privileges by modifying this file.
|
19-09-2017 - 01:31 | 05-10-2010 - 18:00 | |
| CVE-2010-3195 | 5.0 |
Unspecified vulnerability in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 on Windows Server 2008 allows attackers to cause a denial of service (trap) via vectors involving "special group and user enumeration."
|
19-09-2017 - 01:31 | 31-08-2010 - 22:00 | |
| CVE-2010-3194 | 7.5 |
The DB2DART program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows attackers to bypass intended file access restrictions via unspecified vectors related to overwriting files owned by an instance owner.
|
19-09-2017 - 01:31 | 31-08-2010 - 22:00 | |
| CVE-2010-3193 | 10.0 |
Unspecified vulnerability in the DB2STST program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 has unknown impact and attack vectors.
|
19-09-2017 - 01:31 | 31-08-2010 - 22:00 | |
| CVE-2010-0462 | 6.5 |
Heap-based buffer overflow in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows remote authenticated users to have an unspecified impact via a SELECT statement that has a long column name generated with the REPEAT function.
|
19-09-2017 - 01:30 | 28-01-2010 - 20:30 | |
| CVE-2009-4331 | 7.2 |
The Install component in IBM DB2 9.5 before FP5 and 9.7 before FP1 configures the High Availability (HA) scripts with incorrect file-permission and authorization settings, which has unknown impact and local attack vectors.
|
07-10-2010 - 05:44 | 16-12-2009 - 18:30 | |
| CVE-2009-3471 | 7.5 |
IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP2 does not perform the expected drops of certain table functions upon a loss of privileges by the functions' definers, which has unspecified impact and remote attack vectors.
|
07-10-2010 - 05:42 | 29-09-2009 - 21:30 | |
| CVE-2010-3739 | 6.4 |
The audit facility in the Security component in IBM DB2 UDB 9.5 before FP6a uses instance-level audit settings to capture connection (aka CONNECT and AUTHENTICATION) events in certain circumstances in which database-level audit settings were intended
|
06-10-2010 - 04:00 | 05-10-2010 - 18:00 |