PT-2005-5529 · Ibm · Ibm Db2

Chris Anley · Publicado 2005-12-31 · Atualizado 2024-02-16 · CVE-2005-4868

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: IBM DB2 version 8.1

Description: The issue allows local users to gain unauthorized access and sensitive information, such as cleartext passwords, due to default permissions of read and write for the Everyone group in shared memory sections and events. This can also cause a denial of service.

Recommendations: For IBM DB2 version 8.1, consider changing the default permissions of shared memory sections and events to restrict access to the Everyone group, limiting it to only necessary users to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2005-4868

Produtos afetados

Ibm Db2

Referências · 9

• 🔥 https://exploit-db.com/exploits/24678 · Exploit
• http://www-1.ibm.com/support/docview.wss?uid=swg21181228 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4868 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=110495402231836&w=2 · Nota
• http://secunia.com/advisories/12733 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17605 · Nota
• http://nextgenss.com/advisories/db205012005F.txt · Nota
• https://t.me/cvenotify/71728 · Publicação no Telegram
• http://securityfocus.com/bid/11402 · Correção