The XML feature in IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 allows remote authenticated users to cause a denial of service (infinite loop) by calling the XMLPARSE function with a crafted string expression.

Versions of IBM DB2 9.8 earlier than Fix Pack 5 are potentially affected by multiple issues :

 - A flaw exists in relational data services that is due to privileges persisting when they're removed from users.  This may allow attackers to execute non-DDL statements after their privileges have been revoked.
 - A flaw exists that is triggered when Self Tuning Memory Manager (STMM) is enabled and DATABASE_MEMORY is set to AUTOMATIC.  This may allow a local attacker to potentially cause a crash.
 - An authorized user with 'CONNECT' privileges from 'PUBLIC' can cause a denial of service via unspecified methods related to DB2's XML feature. (CVE-2012-0712)
 - An unspecified information disclosure vulnerability exists related to the XML feature that can allow improper access to arbitrary XML files. (CVE-2012-0713)
 - An error exists related to the Distributed RelationalDatabase Architecture (DRDA) that can allow denial of service conditions when processing certain request. (CVE-2012-2180)

According to its version, the installation of IBM DB2 9.8 running on the remote host is prior to Fix Pack 5. It is, therefore, affected by multiple vulnerabilities :

  - An authorized user with 'CONNECT' privileges from     'PUBLIC' can cause a denial of service via unspecified     methods related to DB2's XML feature. (CVE-2012-0712)

  - An unspecified information disclosure vulnerability     exists related to the XML feature that can allow     improper access to arbitrary XML files. (CVE-2012-0713)

  - An error exists related to the Distributed Relational     Database Architecture (DRDA) that can allow denial of     service conditions when processing certain request.
    (CVE-2012-2180)

  - A security bypass vulnerability exists due to the     persistence of privileges when they're removed from     users. An attacker can exploit this to execute non-DDL     statements even if their privileges have been revoked.

  - An unspecified flaw exists that allows an attacker to     cause a denial of service condition when Self Tuning     Memory Manager (STMM) is enabled and DATABASE_MEMORY is     set to AUTOMATIC.

According to its version, the installation of DB2 9.7 running on the remote host is prior to Fix Pack 6. It is, therefore, affected by multiple vulnerabilities :

  - A local user can exploit a vulnerability in the bundled     IBM Tivoli Monitoring Agent (ITMA) to escalate their     privileges. (CVE-2011-4061)

  - An authorized user with 'CONNECT' and 'CREATEIN'     privileges on a database can perform unauthorized     reads on tables. (CVE-2012-0709)

  - An unspecified error in the DB2 Administration Server     (DAS) can allow remote privilege escalation or denial     of service via unspecified vectors. Note that this     issue does not affect Windows hosts. (CVE-2012-0711)

  - An authorized user with 'CONNECT' privileges from     'PUBLIC' can cause a denial of service via unspecified     methods related to DB2's XML feature. (CVE-2012-0712)

  - An unspecified information disclosure error exists     related to the XML feature that can allow improper     access to arbitrary XML files. (CVE-2012-0713)

  - An error exists related to the Distributed Relational     Database Architecture (DRDA) that can allow denial of     service conditions when processing certain request.
    (CVE-2012-2180)

Versions of IBM DB2 9.5 earlier than Fix Pack 9 are potentially affected by multiple issues :

 - Incorrect, world-writable file permissions are in place for the file 'NODES.REG'. (IC79518)
 - An unspecified error can allow attacks to cause a denial of service via unspecified vectors. (IC76899)
 - A local user can exploit a vulnerability in the bundled IBM Tivoli Monitoring Agent (ITMA) to escalate their privileges. (IC79970)
 - An unspecified error in the DB2 Administration Server (DAS) can allow remote privilege escalation or denial of service via unspecified vectors. Note that this issue does not affect Windows hosts. (IC80728)
 - An authorized user with 'CONNECT' privileges from 'PUBLIC' can cause a denial of service via unspecified methods related to DB2's XML feature. (IC81379)
 - An authorized user with 'CONNECT' and 'CREATEIN' privileges on a database can perform unauthorized reads on tables. (IC81387)

According to its version, the installation of IBM DB2 9.5 running on the remote host is prior to Fix Pack 9. It is, therefore, affected by the following vulnerabilities :

  - Incorrect, world-writable file permissions are in place     for the file 'NODES.REG'. (IC79518)

  - An unspecified error can allow attacks to cause a     denial of service via unspecified vectors. (IC76899)

  - A local user can exploit a vulnerability in the bundled     IBM Tivoli Monitoring Agent (ITMA) to escalate their     privileges. (IC79970)

  - An unspecified error in the DB2 Administration Server     (DAS) can allow remote privilege escalation or denial     of service via unspecified vectors. Note that this     issue does not affect Windows hosts. (IC80728)

  - An authorized user with 'CONNECT' privileges from     'PUBLIC' can cause a denial of service via unspecified     methods related to DB2's XML feature. (IC81379)

  - An authorized user with 'CONNECT' and 'CREATEIN'     privileges on a database can perform unauthorized     reads on tables. (IC81387)

ID	Name	Product	Family	Severity
9196	IBM DB2 9.8 < Fix Pack 5 Multiple Vulnerabilities	Nessus Network Monitor	Database	medium
59905	IBM DB2 9.8 < Fix Pack 5 Multiple Vulnerabilities	Nessus	Databases	medium
59904	IBM DB2 9.7 < Fix Pack 6 Multiple Vulnerabilities	Nessus	Databases	high
6347	IBM DB2 9.5 < 9.5 Fix Pack 9 Multiple Vulnerabilities	Nessus Network Monitor	Database	medium
58293	DB2 9.5 < Fix Pack 9 Multiple Vulnerabilities	Nessus	Databases	medium

Detections

Analytics

CVE-2012-0712

medium

Tenable Plugins

medium

medium

high

medium

medium