Db2 Universal Database
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:db2_universal_database:9.1:*:solaris:*:*:*:*:*
part: a version: 9.1 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Db2 Universal Database (f99543c7-2991-55c1-a7d8-0c7dca8462e1) |
| Edition | solaris |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-0173 |
vulnerable | 2026-06-08 04:51:08.039140 |
Details available
Unspecified vulnerability in the server in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote authenticated users to cause a denial of service (trap) via a crafted data stream.
Published: 2009-01-16T21:00:00.000Z
Updated: 2024-08-07T04:24:17.975Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0172 |
vulnerable | 2026-06-08 04:51:08.021898 |
Details available
Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote attackers to cause a denial of service (infinite loop) via a crafted CONNECT data stream.
Published: 2009-01-16T21:00:00.000Z
Updated: 2024-08-07T04:24:18.155Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3858 |
vulnerable | 2026-06-08 04:50:36.983092 |
Details available
The Downlevel DB2RA Support component in IBM DB2 9.1 before Fixpak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT data stream that simulates a V7 client connect request.
Published: 2008-08-28T17:00:00.000Z
Updated: 2024-08-07T09:53:00.430Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3857 |
vulnerable | 2026-06-08 04:50:36.982306 |
Details available
The Base Service Utilities component in IBM DB2 9.1 before Fixpak 5 retains a cleartext password in memory after the database connection that sent the password is fully established, which might allow local users to obtain sensitive information by reading a memory dump.
Published: 2008-08-28T17:00:00.000Z
Updated: 2024-08-07T09:53:00.417Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3856 |
vulnerable | 2026-06-08 04:50:36.981337 |
Details available
The routine infrastructure component in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP1 on Unix and Linux does not change the ownership of the db2fmp process, which has unknown impact and attack vectors.
Published: 2008-08-28T17:00:00.000Z
Updated: 2024-08-07T09:53:00.414Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3855 |
vulnerable | 2026-06-08 04:50:36.915337 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3854 |
vulnerable | 2026-06-08 04:50:36.906913 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3853 |
vulnerable | 2026-06-08 04:50:36.906051 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3852 |
vulnerable | 2026-06-08 04:50:36.892982 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.