CVE-2005-4864

Stack-based buffer overflow in libdb2.so in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long DB2LPORT environment variable.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:db2_universal_database:7.0:*:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.0:*:hp-ux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.0:*:linux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.0:*:solaris:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.1:*:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.1:*:hp-ux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.1:*:linux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.1:*:solaris:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.2:*:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.2:*:hp-ux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.2:*:linux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.2:*:solaris:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.0:*:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.0:*:hp-ux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.0:*:solaris:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1:*:hp_ux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1:*:linux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1:*:solaris:*:*:*:*:*

History

21 Nov 2024, 00:05

Type Values Removed Values Added
References () http://marc.info/?l=bugtraq&m=110495092105541&w=2 - () http://marc.info/?l=bugtraq&m=110495092105541&w=2 -
References () http://secunia.com/advisories/12733/ - Patch, Vendor Advisory () http://secunia.com/advisories/12733/ - Patch, Vendor Advisory
References () http://www-1.ibm.com/support/docview.wss?uid=swg1IY62042 - Patch () http://www-1.ibm.com/support/docview.wss?uid=swg1IY62042 - Patch
References () http://www.ngssoftware.com/advisories/db205012005B.txt - () http://www.ngssoftware.com/advisories/db205012005B.txt -
References () http://www.securityfocus.com/bid/11390 - Patch () http://www.securityfocus.com/bid/11390 - Patch
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/17616 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/17616 -

Information

Published : 2005-12-31 05:00

Updated : 2024-11-21 00:05


NVD link : CVE-2005-4864

Mitre link : CVE-2005-4864

CVE.ORG link : CVE-2005-4864


JSON object : View

Products Affected

ibm

  • db2_universal_database
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer