| Max CVSS | 10.0 | Min CVSS | 7.2 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-6051 | 10.0 |
IBM DB2 UDB 9.1 before Fixpak 4 assigns incorrect privileges to the (1) DB2ADMNS and (2) DB2USERS alternative groups, which has unknown impact. NOTE: the vendor description of this issue is too vague to be certain that it is security-related.
|
31-10-2012 - 02:46 | 20-11-2007 - 20:46 | |
| CVE-2007-5652 | 7.8 |
IBM DB2 UDB 9.1 before Fixpak 4 does not properly manage storage of a list containing authentication information, which might allow attackers to cause a denial of service (instance crash) or trigger memory corruption. NOTE: the vendor description of
|
12-05-2011 - 04:00 | 23-10-2007 - 21:47 | |
| CVE-2007-6050 | 7.2 |
Unspecified vulnerability in DB2LICD in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors, related to creation of an "insecure directory."
|
08-03-2011 - 03:01 | 20-11-2007 - 20:46 | |
| CVE-2007-6048 | 10.0 |
IBM DB2 UDB 9.1 before Fixpak 4 uses incorrect permissions on ACLs for DB2NODES.CFG, which has unknown impact and attack vectors. NOTE: the vendor description of this issue is too vague to be certain that it is security-related.
|
08-03-2011 - 03:01 | 20-11-2007 - 20:46 | |
| CVE-2007-6047 | 10.0 |
Unspecified vulnerability in the DB2DART tool in IBM DB2 UDB 9.1 before Fixpak 4 allows attackers to execute arbitrary commands as the DB2 instance owner, related to invocation of TPUT by DB2DART.
|
08-03-2011 - 03:01 | 20-11-2007 - 20:46 | |
| CVE-2007-6053 | 9.3 |
IBM DB2 UDB 9.1 before Fixpak 4 does not properly handle use of large numbers of file descriptors, which might allow attackers to have an unknown impact involving "memory corruption." NOTE: the vendor description of this issue is too vague to be cert
|
08-03-2011 - 03:01 | 20-11-2007 - 20:46 | |
| CVE-2007-6046 | 7.2 |
Unspecified vulnerability in unspecified setuid programs in IBM DB2 UDB 9.1 before Fixpak 4 allows local users to have an unknown impact.
|
08-03-2011 - 03:01 | 20-11-2007 - 20:46 | |
| CVE-2007-6045 | 10.0 |
Unspecified vulnerability in (1) DB2WATCH and (2) DB2FREEZE in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors.
|
08-03-2011 - 03:01 | 20-11-2007 - 20:46 | |
| CVE-2007-6052 | 7.8 |
IBM DB2 UDB 9.1 before Fixpak 4 does not properly perform vector aggregation, which might allow attackers to cause a denial of service (divide-by-zero error and DBMS crash), related to an "overflow." NOTE: the vendor description of this issue is too
|
08-03-2011 - 03:01 | 20-11-2007 - 20:46 | |
| CVE-2007-6049 | 7.2 |
Unspecified vulnerability in the SSL LOAD GSKIT action in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors, involving a call to dlopen when the effective uid is root.
|
08-03-2011 - 03:01 | 20-11-2007 - 20:46 |