Lucene search

[email protected]CVE-2005-4868

HistoryOct 06, 2007 - 9:00 p.m.

CVE-2005-4868

2007-10-0621:00:00

CWE-732

[email protected]

web.nvd.nist.gov

ibm

db2

8.1

shared memory

unauthorized access

sensitive information

denial of service

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.8%

JSON

Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, which allows local users to gain unauthorized access, gain sensitive information, such as cleartext passwords, and cause a denial of service.

Affected configurations

NVD

Node

ibmdb2_universal_databaseMatch7.1

ibmdb2_universal_databaseMatch7.2

ibmdb2_universal_databaseMatch8.0

ibmdb2_universal_databaseMatch8.1

AND

microsoftwindowsMatch-

CPENameOperatorVersion
ibm:db2_universal_databaseibm db2 universal databaseeq7.1
ibm:db2_universal_databaseibm db2 universal databaseeq7.2
ibm:db2_universal_databaseibm db2 universal databaseeq8.0
ibm:db2_universal_databaseibm db2 universal databaseeq8.1

CPE	Name	Operator	Version
ibm:db2_universal_database	ibm db2 universal database	eq	7.1
ibm:db2_universal_database	ibm db2 universal database	eq	7.2
ibm:db2_universal_database	ibm db2 universal database	eq	8.0
ibm:db2_universal_database	ibm db2 universal database	eq	8.1

References

marc.info/?l=bugtraq&m=110495402231836&w=2

secunia.com/advisories/12733/

www-1.ibm.com/support/docview.wss?uid=swg21181228

www.nextgenss.com/advisories/db205012005F.txt

www.securityfocus.com/bid/11402

exchange.xforce.ibmcloud.com/vulnerabilities/17605

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.8%

JSON

Related for CVE-2005-4868

nvd1 cvelist1 nessus1