CVE-2005-4866

Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminator to be removed and leads to the overflow.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:db2_universal_database:7.0:*:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.0:*:hp-ux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.0:*:linux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.0:*:solaris:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.1:*:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.1:*:hp-ux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.1:*:linux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.1:*:solaris:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.1:*:windows:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.2:*:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.2:*:hp-ux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.2:*:linux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.2:*:solaris:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.2:*:windows:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.0:*:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.0:*:hp-ux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.0:*:solaris:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.0:*:windows:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1:*:hp_ux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1:*:linux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1:*:solaris:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1:*:windows:*:*:*:*:*

History

No history.

Information

Published : 2005-12-31 05:00

Updated : 2024-02-04 16:52


NVD link : CVE-2005-4866

Mitre link : CVE-2005-4866

CVE.ORG link : CVE-2005-4866


JSON object : View

Products Affected

ibm

  • db2_universal_database
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer