CVE-2005-4867 Stack-based buffer overflow in the SATENCRYPT function in IBM DB2 8.1, when Satellite Administration (SATADMIN) is enabled, allows remote attackers to execute arbitrary code via a long parameter.
HighCVSS 9.3
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the SATENCRYPT function in IBM DB2 8.1, when Satellite Administration (SATADMIN) is enabled, allows remote attackers to execute arbitrary code via a long parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm db2 universal database | = 7.0 | No fix listed |
| ibm db2 universal database | = 7.1 | No fix listed |
| ibm db2 universal database | = 7.2 | No fix listed |
| ibm db2 universal database | = 8.0 | No fix listed |
| ibm db2 universal database | = 8.1 | No fix listed |
References
- 20050105 IBM DB2 SATADMIN.SATENCRYPT buffer overflow (#NISR05012005E) mailing-list
- 12733 patch third-party-advisory vendor-advisory
- www-1.ibm.com patch
- IY62040 vendor-advisory
- www.ngssoftware.com
- 11396 patch vdb-entry
- db2-satadmin-bo(17612) vdb-entry