Lucene search

[email protected]CVE-2005-4870

HistoryOct 06, 2007 - 9:00 p.m.

CVE-2005-4870

2007-10-0621:00:00

CWE-119

[email protected]

web.nvd.nist.gov

ibm

db2

8.1

stack-based buffer overflows

remote code execution

security vulnerability

cve-2005-4870

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7.3 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.2%

JSON

Stack-based buffer overflows in the (1) xmlvarcharfromfile, (2) xmlclobfromfile, (3) xmlfilefromvarchar, and (4) xmlfilefromclob function calls in IBM DB2 8.1 allow remote attackers to execute arbitrary code via a 94-byte second argument, which causes the return address to be overwritten with a pointer to the argument.

Affected configurations

NVD

Node

ibmdb2Match8.1

CPENameOperatorVersion
ibm:db2ibm db2eq8.1

CPE	Name	Operator	Version
ibm:db2	ibm db2	eq	8.1

References

marc.info/?l=bugtraq&m=110495554227717&w=2

secunia.com/advisories/12733/

www-1.ibm.com/support/docview.wss?uid=swg1IY62297

www.nextgenss.com/advisories/db205012005H.txt

www.securityfocus.com/bid/11404

exchange.xforce.ibmcloud.com/vulnerabilities/17617

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7.3 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.2%

JSON

Related for CVE-2005-4870

cvelist1 nvd1 nessus1