Lucene search

[email protected]CVE-2005-4866

HistoryDec 31, 2005 - 5:00 a.m.

CVE-2005-4866

2005-12-3105:00:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2005-4866

ibm db2

buffer overflow

jdbc

remote code execution

7.9 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.2%

JSON

Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminator to be removed and leads to the overflow.

CPENameOperatorVersion
ibm:db2_universal_databaseibm db2 universal databaseeq7.1
ibm:db2_universal_databaseibm db2 universal databaseeq8.1
ibm:db2_universal_databaseibm db2 universal databaseeq8.0
ibm:db2_universal_databaseibm db2 universal databaseeq7.0
ibm:db2_universal_databaseibm db2 universal databaseeq7.2

CPE	Name	Operator	Version
ibm:db2_universal_database	ibm db2 universal database	eq	7.1
ibm:db2_universal_database	ibm db2 universal database	eq	8.1
ibm:db2_universal_database	ibm db2 universal database	eq	8.0
ibm:db2_universal_database	ibm db2 universal database	eq	7.0
ibm:db2_universal_database	ibm db2 universal database	eq	7.2

References

marc.info/?l=bugtraq&m=110495251101381&w=2

secunia.com/advisories/12733/

www-1.ibm.com/support/docview.wss?uid=swg1IY61492

www.nextgenss.com/advisories/db205012005D.txt

www.securityfocus.com/bid/11401

exchange.xforce.ibmcloud.com/vulnerabilities/17613

7.9 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.2%

JSON

Related for CVE-2005-4866

cvelist1 nessus1