CVE-2005-4871

Certain XML functions in IBM DB2 8.1 run with the privileges of DB2 instead of the logged-in user, which allows remote attackers to create or overwrite files via 1 XMLFileFromVarchar or 2 XMLFileFromClob, or read files via 3 XMLVarcharFromFile or 4 XMLClobFromFile...

CVE-2005-4868

The CVE-2005-4868 entry affects IBM DB2 8.1. Shared memory sections and events have default read/write permissions for the Everyone group, enabling local users to gain unauthorized access and potentially view sensitive data (e.g., cleartext passwords) and cause a denial of service. Exploitation i...

CVE-2005-4870

CVE-2005-4870 describes stack-based buffer overflows in IBM DB2 8.1 affecting four XML-related functions (xmlvarcharfromfile, xmlclobfromfile, xmlfilefromvarchar, xmlfilefromclob). The overflow is triggered by a 94-byte second argument, leading to overwriting the return address to a pointer withi...

CVE-2005-4866

Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminato...

CVE-2005-4864

Stack-based buffer overflow in libdb2.so in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long DB2LPORT environment variable...

CVE-2005-4865

Stack-based buffer overflow in call in IBM DB2 7.x and 8.1 allows remote attackers to execute arbitrary code via a long libname...

CVE-2005-4869

The 1 tochar and 2 todate function in IBM DB2 8.1 allows local users to cause a denial of service application crash via an empty string in the second parameter, which causes a null pointer dereference...

CVE-2005-4867

Stack-based buffer overflow in the SATENCRYPT function in IBM DB2 8.1, when Satellite Administration SATADMIN is enabled, allows remote attackers to execute arbitrary code via a long parameter...

CVE-2005-4867

IBM DB2 8.1 exposes a stack-based buffer overflow in the SATENCRYPT function when Satellite Administration (SATADMIN) is enabled. An attacker can trigger code execution remotely by sending a crafted long parameter. The issue is tied to a buffer overflow in SATENCRYPT; no remediation or patch deta...

CVE-2005-4866

CVE-2005-4866 describes a stack-based buffer overflow in IBM DB2 8.1’s JDBC Applet Server. The vulnerability can be triggered remotely by an attacker who connects, sends a very long username, disconnects, then reconnects and sends a shorter username with an unexpected db2java.zip version, which r...

CVE-2005-4865

CVE-2005-4865 describes a stack-based buffer overflow in the IBM DB2 client/server call path that can be triggered by a long libname, affecting IBM DB2 Universal Database 7.x and 8.x (specifically 8.1 in some records). The vulnerability allows remote code execution and is rated high by NVD, with ...

CVE-2005-4864

CVE-2005-4864 describes a stack-based buffer overflow in IBM DB2 UDB 7.x and 8.1, triggered by a long DB2LPORT environment variable in the libdb2.so library. This vulnerability allows local users to execute arbitrary code with the privileges of the running DB2 process. Affected product/version: I...

CVE-2005-4863

Stack-based buffer overflow in db2fmp in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long parameter...

CVE-2005-4871

IBM DB2 8.1 contains a vulnerability where certain XML functions run with the DB2 process privileges instead of the logged-in user, enabling a remote attacker to create or overwrite files via XMLFileFromVarchar or XMLFileFromClob, or to read files via XMLVarcharFromFile or XMLClobFromFile. The NV...

CVE-2005-4868

Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, which allows local users to gain unauthorized access, gain sensitive information, such as cleartext passwords, and cause a denial of service...

CVE-2005-4863

CVE-2005-4863 describes a stack-based buffer overflow in IBM DB2’s db2fmp component, enabling local users to execute arbitrary code via a long parameter. Affected products include IBM DB2 Universal Database 7.x and 8.x (DB2 8.1). Root cause is a buffer overflow in db2fmp; impact is arbitrary code...

CVE-2005-4869

The CVE-2005-4869 entry affects IBM DB2 8.1, where the (1) to_char and (2) to_date functions can be exploited by an empty string in the second parameter to trigger a local denial of service (application crash) via a null pointer dereference. The vulnerability is triggered locally, and the cited d...

CVE-2005-4865: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in call in IBM DB2 7.x and 8.1 allows remote attackers to execute arbitrary code via a long libname...

CVE-2005-4868: Incorrect Permission Assignment for Critical Resource

Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, which allows local users to gain unauthorized access, gain sensitive information, such as cleartext passwords, and cause a denial of service...

CVE-2005-4864: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in libdb2.so in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long DB2LPORT environment variable...