Lucene search

[email protected]CVE-2005-0417

HistoryApr 27, 2005 - 4:00 a.m.

CVE-2005-0417

2005-04-2704:00:00

[email protected]

web.nvd.nist.gov

cve-2005-0417

high risk

vulnerability

db2 universal database

nvd

security

disclosure

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.7%

JSON

Unknown “high risk” vulnerability in DB2 Universal Database 8.1 and earlier has unknown impact and attack vectors. NOTE: due to the delayed disclosure of details for this issue, this candidate may be SPLIT in the future. In addition, this may be a duplicate of other issues as reported by the vendor.

Affected configurations

NVD

Node

ibmdb2_universal_databaseMatch6.0

ibmdb2_universal_databaseMatch7.0linux

ibmdb2_universal_databaseMatch7.1linux

ibmdb2_universal_databaseMatch7.2linux

ibmdb2_universal_databaseMatch8.0linux

ibmdb2_universal_databaseMatch8.1aix

ibmdb2_universal_databaseMatch8.2windows

CPENameOperatorVersion
ibm:db2_universal_databaseibm db2 universal databaseeq6.0
ibm:db2_universal_databaseibm db2 universal databaseeq7.0
ibm:db2_universal_databaseibm db2 universal databaseeq7.1
ibm:db2_universal_databaseibm db2 universal databaseeq7.2
ibm:db2_universal_databaseibm db2 universal databaseeq8.0
ibm:db2_universal_databaseibm db2 universal databaseeq8.1
ibm:db2_universal_databaseibm db2 universal databaseeq8.2

CPE	Name	Operator	Version
ibm:db2_universal_database	ibm db2 universal database	eq	6.0
ibm:db2_universal_database	ibm db2 universal database	eq	7.0
ibm:db2_universal_database	ibm db2 universal database	eq	7.1
ibm:db2_universal_database	ibm db2 universal database	eq	7.2
ibm:db2_universal_database	ibm db2 universal database	eq	8.0
ibm:db2_universal_database	ibm db2 universal database	eq	8.1
ibm:db2_universal_database	ibm db2 universal database	eq	8.2

References

marc.info/?l=bugtraq&m=110801212422825&w=2

www.ngssoftware.com/advisories/db2-09-05-05.htm

www.securityfocus.com/bid/12508

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.7%

JSON

Related for CVE-2005-0417

nvd1 cvelist1 nessus1