DB2漏洞评估工具

NGSSQuirreL for DB2
AppDetective

DB2漏洞:

Date: 18th October 2005
Title:
DB2 Version 8 Fixpak 10
Type: Patchset
Source: IBM,
IBM
Fallout: Fix some flaws

Date: 18th October 2005
Title:
DB2 Multiple Flaws
Type: Advisory
Source: Secunia,
Secunia
Fallout: DoS, Unauthorized Object Creation

Date: 24th June 2005
Title:
DB2 Version 8 Fixpak 9a
Type: Patchset
Source: IBM,
IBM
Fallout: Fix some flaws

Date: 24th June 2005
Title:
DB2 Authorization Bypass
Type: Advisory
Source: Secunia,
Secunia
Fallout: Unauthorized Data Manipulation

Date: 19th October 2004
Title:
LC_TYPE Buffer Overflow
Type: Advisory
Source: David Litchfield,
NGSSoftware
Fallout: Remote user can gain control of the database server

DB2安全

Title: DB2 Security
Author: IBM, IBM
[Mirror] [Original]

Title: The Database Security Blanket
Author: Paul Zikopoulos, IBM
[No Mirror] [Original]

Title: Protecting DB2 Data
Author: Ulf T. Mattsson, Protegrity
[Mirror] [Original]

Title: Securing your database
Author: Michael Dougherty, Burntsand Corp.
[Mirror] [Original]

Title: Hack-Proofing DB2
Author: Aaron Newman, AppSec Inc.
[Mirror] [Original]