Lucene search
HistoryOct 06, 2007 - 9:00 p.m.
CVE-2005-4865
cve-2005-4865
ibm
db2
buffer overflow
security vulnerability
nvd
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.4
Confidence
High
EPSS
0.229
Percentile
96.6%
Stack-based buffer overflow in call in IBM DB2 7.x and 8.1 allows remote attackers to execute arbitrary code via a long libname.
Affected configurations
Node
ibmdb2_universal_databaseMatch7.0aix
ORibmdb2_universal_databaseMatch7.0hp-ux
ORibmdb2_universal_databaseMatch7.0linux
ORibmdb2_universal_databaseMatch7.0solaris
ORibmdb2_universal_databaseMatch7.1aix
ORibmdb2_universal_databaseMatch7.1hp-ux
ORibmdb2_universal_databaseMatch7.1linux
ORibmdb2_universal_databaseMatch7.1solaris
ORibmdb2_universal_databaseMatch7.1windows
ORibmdb2_universal_databaseMatch7.2aix
ORibmdb2_universal_databaseMatch7.2hp-ux
ORibmdb2_universal_databaseMatch7.2linux
ORibmdb2_universal_databaseMatch7.2solaris
ORibmdb2_universal_databaseMatch7.2windows
ORibmdb2_universal_databaseMatch8.0aix
ORibmdb2_universal_databaseMatch8.0hp-ux
ORibmdb2_universal_databaseMatch8.0linux
ORibmdb2_universal_databaseMatch8.0solaris
ORibmdb2_universal_databaseMatch8.0windows
ORibmdb2_universal_databaseMatch8.1aix
ORibmdb2_universal_databaseMatch8.1hp_ux
ORibmdb2_universal_databaseMatch8.1linux
ORibmdb2_universal_databaseMatch8.1solaris
ORibmdb2_universal_databaseMatch8.1windows
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | db2_universal_database | 8.0 | cpe:/a:ibm:db2_universal_database:8.0::: |
| ibm | db2_universal_database | 7.1 | cpe:/a:ibm:db2_universal_database:7.1::: |
| ibm | db2_universal_database | 7.2 | cpe:/a:ibm:db2_universal_database:7.2::: |
| ibm | db2_universal_database | 8.1 | cpe:/a:ibm:db2_universal_database:8.1::: |
| ibm | db2_universal_database | 7.0 | cpe:/a:ibm:db2_universal_database:7.0::: |
References
Related
nvd
nvd
CVE-2005-4865
2005-12-31 05:00:00
cvelist
cvelist
CVE-2005-4865
2007-10-06 21:00:00
kaspersky
kaspersky
KLA10133 ACE vulnerabilities in IBM DB2
2005-12-31 00:00:00
nessus
nessus
IBM DB2 < 8 Fix Pack 7a Multiple Vulnerabilities
2004-10-17 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.4
Confidence
High
EPSS
0.229
Percentile
96.6%
Related for CVE-2005-4865