[email protected]CVE-2005-4865

HistoryDec 31, 2005 - 5:00 a.m.

CVE-2005-4865

2005-12-3105:00:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2005-4865

ibm

db2

buffer overflow

security vulnerability

nvd

8.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.258 Low

EPSS

Percentile

96.7%

JSON

Stack-based buffer overflow in call in IBM DB2 7.x and 8.1 allows remote attackers to execute arbitrary code via a long libname.

CPENameOperatorVersion
ibm:db2_universal_databaseibm db2 universal databaseeq7.1
ibm:db2_universal_databaseibm db2 universal databaseeq8.1
ibm:db2_universal_databaseibm db2 universal databaseeq8.0
ibm:db2_universal_databaseibm db2 universal databaseeq7.0
ibm:db2_universal_databaseibm db2 universal databaseeq7.2

CPE	Name	Operator	Version
ibm:db2_universal_database	ibm db2 universal database	eq	7.1
ibm:db2_universal_database	ibm db2 universal database	eq	8.1
ibm:db2_universal_database	ibm db2 universal database	eq	8.0
ibm:db2_universal_database	ibm db2 universal database	eq	7.0
ibm:db2_universal_database	ibm db2 universal database	eq	7.2

References

marc.info/?l=bugtraq&m=110495173031208&w=2

secunia.com/advisories/12733/

www-1.ibm.com/support/docview.wss?uid=swg1IY62041

www-1.ibm.com/support/docview.wss?uid=swg21181228

www.nextgenss.com/advisories/db205012005C.txt

www.securityfocus.com/bid/11399

exchange.xforce.ibmcloud.com/vulnerabilities/17611

8.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.258 Low

EPSS

Percentile

96.7%

JSON

Related for CVE-2005-4865

cvelist1 nessus1