IBM DB2 Multiple Vulnerabilities

Multiple Vulnerabilities have been identified on IBM DB2 server, which could be exploited to escalate privilege, discloese sensitive infromation, and cause system crash.

1. Vulnerability in IBM DB2 server products could allow a specially-crafted DRDA request to cause disruption to the server.
   The vulnerability exists in the Distributed Relational Database Architecture (DRDA) module that handles DRDA chaining. A malicious user with knowledge of DRDA could send a specially crafted request to a database server to cause disruptions or a crash.
2. Vulnerability in IBM DB2 XML Feature could allow a remote attacker to view XML files owned by the DB2 instance owner.
   A security vulnerability in the DB2 XML Feature which could allow a malicious user to remotely exploit and view XML files owned by the DB2 instance owner. To exploit the vulnerability, the user would need to have valid security credentials, CONNECT privilege to the database and be able to execute a specially crafted SQL statement.
3. Vulnerability in IBM DB2 could allow an authenticated user to view data from a table to which they do not have privilege.
   A security vulnerability which would allow an authenticated user to view data from a table to which they do not have authority to view. To exploit the vulnerability, the user would need to have valid security credentials to connect to the database and execute specially crafted SQL statements. To execute the SQL statements the user would need CREATEIN privileges to the database.