CyberSec.Space Logo
Back to CVE Browser

CVE-2005-4865

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1900%
EPSS Percentile35.56th
PublishedDec 31, 2005
Last ModifiedApr 16, 2026

Vulnerability Description

Stack-based buffer overflow in call in IBM DB2 7.x and 8.1 allows remote attackers to execute arbitrary code via a long libname.

Affected Platforms (CPE)

📦
Ibm

Db2 Universal Database

= 7.0
📦
Ibm

Db2 Universal Database

= 7.0
📦
Ibm

Db2 Universal Database

= 7.0
📦
Ibm

Db2 Universal Database

= 7.0
📦
Ibm

Db2 Universal Database

= 7.1
📦
Ibm

Db2 Universal Database

= 7.1
📦
Ibm

Db2 Universal Database

= 7.1
📦
Ibm

Db2 Universal Database

= 7.1
📦
Ibm

Db2 Universal Database

= 7.1
📦
Ibm

Db2 Universal Database

= 7.2
📦
Ibm

Db2 Universal Database

= 7.2
📦
Ibm

Db2 Universal Database

= 7.2
📦
Ibm

Db2 Universal Database

= 7.2
📦
Ibm

Db2 Universal Database

= 7.2
📦
Ibm

Db2 Universal Database

= 8.0
📦
Ibm

Db2 Universal Database

= 8.0
📦
Ibm

Db2 Universal Database

= 8.0
📦
Ibm

Db2 Universal Database

= 8.0
📦
Ibm

Db2 Universal Database

= 8.0
📦
Ibm

Db2 Universal Database

= 8.1
📦
Ibm

Db2 Universal Database

= 8.1
📦
Ibm

Db2 Universal Database

= 8.1
📦
Ibm

Db2 Universal Database

= 8.1
📦
Ibm

Db2 Universal Database

= 8.1

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=110495173031208&w=2
🔗 http://secunia.com/advisories/12733/
🔗 http://www-1.ibm.com/support/docview.wss?uid=swg1IY62041
🔗 http://www-1.ibm.com/support/docview.wss?uid=swg21181228
🔗 http://www.nextgenss.com/advisories/db205012005C.txt
🔗 http://www.securityfocus.com/bid/11399
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/17611
🔗 http://marc.info/?l=bugtraq&m=110495173031208&w=2

Related Vulnerabilities

CVE-2007-367610.0

IBM DB2 Universal Database (UDB) Administration Server (DAS) 8 before Fix Pack 16 and 9 before Fix Pack 4 allows remote attackers ...

CVE-2005-041710.0

Unknown "high risk" vulnerability in DB2 Universal Database 8.1 and earlier has unknown impact and attack vectors. NOTE: due to t...

CVE-2005-47377.5

IBM DB2 Universal Database (UDB) 820 before ESE AIX 5765F4100 allows remote authenticated users to cause a denial of service (CPU ...

CVE-2001-00517.5

IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote attackers to ...