PT-2005-5529 · Ibm · Ibm Db2

Chris Anley · Published 2005-12-31 · Updated 2024-02-16 · CVE-2005-4868

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: IBM DB2 version 8.1

Description: The issue allows local users to gain unauthorized access and sensitive information, such as cleartext passwords, due to default permissions of read and write for the Everyone group in shared memory sections and events. This can also cause a denial of service.

Recommendations: For IBM DB2 version 8.1, consider changing the default permissions of shared memory sections and events to restrict access to the Everyone group, limiting it to only necessary users to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2005-4868

Affected Products

Ibm Db2

References · 9

• 🔥 https://exploit-db.com/exploits/24678 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4868 · Security Note
• http://secunia.com/advisories/12733 · Vendor Advisory
• http://securityfocus.com/bid/11402 · Patch
• http://www-1.ibm.com/support/docview.wss?uid=swg21181228 · Note
• http://marc.info/?l=bugtraq&m=110495402231836&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17605 · Note
• http://nextgenss.com/advisories/db205012005F.txt · Note
• https://t.me/cvenotify/71728 · Telegram Post