CVE-2005-4868 Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, which allows local users to gain unauthorized access, gain sensitive information, su...
HighCVSS 7.1
EPSS 0.76%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, which allows local users to gain unauthorized access, gain sensitive information, such as cleartext passwords, and cause a denial of service.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm db2 universal database | = 7.1 | No fix listed |
| ibm db2 universal database | = 7.2 | No fix listed |
| ibm db2 universal database | = 8.0 | No fix listed |
| ibm db2 universal database | = 8.1 | No fix listed |
References
- 20050105 IBM DB2 Windows Permission Problems (#NISR05012005F) mailing-list
- 12733 broken-link third-party-advisory vendor-advisory
- www-1.ibm.com broken-link
- www.nextgenss.com not-applicable
- 11402 broken-link patch third-party-advisory vdb-entry
- db2-everyone-gain-access(17605) third-party-advisory vdb-entry