Vulnerabilities > IBM > DB2 Universal Database > 8.0
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-12-31 | CVE-2005-4864 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in IBM DB2 Universal Database Stack-based buffer overflow in libdb2.so in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long DB2LPORT environment variable. | 7.2 |
| 2005-12-31 | CVE-2005-4740 | Multiple vulnerability in IBM DB2 Universal Database IBM DB2 Universal Database (UDB) 810 before version 8 FixPak 10 allows remote authenticated users to cause a denial of service (db2jd service crash) by "connecting from a downlevel client." | 4.0 |
| 2005-12-31 | CVE-2005-4739 | Multiple vulnerability in IBM DB2 Universal Database IBM DB2 Universal Database (UDB) 820 before version 8 FixPak 10 (s050811) allows remote authenticated users to cause a denial of service (application crash) by using a table function for an instance of snapshot_tbreorg, which triggers a trap in sqlnr_EStoE_action. | 6.8 |
| 2005-12-31 | CVE-2005-4738 | Multiple vulnerability in IBM DB2 Universal Database IBM DB2 Universal Database (UDB) 810 before ESE AIX 5765F4100 does not ensure that a user has execute privileges before permitting object creation based on routines, which allows remote authenticated users to gain privileges. | 6.5 |
| 2005-12-31 | CVE-2005-4737 | Multiple vulnerability in IBM DB2 Universal Database IBM DB2 Universal Database (UDB) 820 before ESE AIX 5765F4100 allows remote authenticated users to cause a denial of service (CPU consumption) by "abnormally" terminating a connection, which prevents db2agents from being properly cleared. | 7.5 |
| 2005-12-31 | CVE-2005-4736 | Multiple vulnerability in IBM DB2 Universal Database IBM DB2 Universal Database (UDB) 820 before 8.2 FP10 allows remote authenticated users to cause a denial of service (disk consumption) via a hash join (hsjn) that triggers an infinite loop in sqlri_hsjnFlushBlocks. | 6.8 |
| 2005-12-31 | CVE-2005-4735 | Multiple vulnerability in IBM DB2 Universal Database IBM DB2 Universal Database (UDB) 810 before 8.1 FP10 allows remote authenticated users to cause a denial of service (application crash) via (1) certain equality predicates that trigger self-removal, aka IY70808; and (2) a query with more than 32000 elements in the IN-list, aka LI70817. | 6.8 |
| 2005-11-16 | CVE-2005-3643 | Authentication Bypass vulnerability in IBM DB2 Windows XP Simple File Sharing IBM DB2 Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account without supplying a password. | 7.5 |
| 2005-04-27 | CVE-2005-0417 | Unspecified vulnerability in IBM DB2 Universal Database Unknown "high risk" vulnerability in DB2 Universal Database 8.1 and earlier has unknown impact and attack vectors. | 10.0 |
| 2004-09-28 | CVE-2003-1052 | Unspecified vulnerability in IBM DB2 and DB2 Universal Database IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs. | 7.2 |