CVE-2005-4865 Stack-based buffer overflow in call in IBM DB2 7.x and 8.1 allows remote attackers to execute arbitrary code via a long libname.
HighCVSS 10.0
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in call in IBM DB2 7.x and 8.1 allows remote attackers to execute arbitrary code via a long libname.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm db2 universal database | = 7.0 | No fix listed |
| ibm db2 universal database | = 7.1 | No fix listed |
| ibm db2 universal database | = 7.2 | No fix listed |
| ibm db2 universal database | = 8.0 | No fix listed |
| ibm db2 universal database | = 8.1 | No fix listed |
References
- 20050105 IBM DB2 call buffer overflow (#NISR05012005C) mailing-list
- 12733 patch third-party-advisory vendor-advisory
- IY62041 patch vendor-advisory
- www-1.ibm.com patch
- www.nextgenss.com
- 11399 patch vdb-entry
- db2-long-library-bo(17611) vdb-entry