Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Db2 Universal Database
Total 67 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-4735 1 Ibm 1 Db2 Universal Database 2025-04-03 6.8 MEDIUM N/A
IBM DB2 Universal Database (UDB) 810 before 8.1 FP10 allows remote authenticated users to cause a denial of service (application crash) via (1) certain equality predicates that trigger self-removal, aka IY70808; and (2) a query with more than 32000 elements in the IN-list, aka LI70817.
CVE-2001-0051 1 Ibm 1 Db2 Universal Database 2025-04-03 7.5 HIGH N/A
IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote attackers to gain access to the database.
CVE-2001-1143 1 Ibm 1 Db2 Universal Database 2025-04-03 5.0 MEDIUM N/A
IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6790, or (2) db2jds.exe on port 6789.
CVE-2005-4864 1 Ibm 1 Db2 Universal Database 2025-04-03 7.2 HIGH N/A
Stack-based buffer overflow in libdb2.so in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long DB2LPORT environment variable.
CVE-2005-3643 1 Ibm 1 Db2 Universal Database 2025-04-03 7.5 HIGH N/A
IBM DB2 Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account without supplying a password.
CVE-2006-3068 1 Ibm 1 Db2 Universal Database 2025-04-03 5.0 MEDIUM N/A
IBM DB2 Universal Database (UDB) before 8.2 FixPak 12 allows remote attackers to cause a denial of service (application crash) by sending "incorrect information ... regarding the package name/creator," which leads to a "memory overwrite."
CVE-2005-4863 1 Ibm 1 Db2 Universal Database 2025-04-03 7.2 HIGH N/A
Stack-based buffer overflow in db2fmp in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long parameter.