Vulnerability in IBM Db2 Universal Database
CVE-2005-4868
Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, which allows local users to gain unauthorized access, gain sensitive information, such as cleartext passwords, and cause a denial of service.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H.
EPSS exploit prediction
EPSS: 0.008 (53.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 53rd percentile — 53.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.008 · newest: 0.008 · change: 0.000
Affected products
- IBM Db2 Universal Database — versions 7.1, 7.2, 8.0
- Microsoft Windows
Weakness classification (CWE)
References
- marc.info/ (mailing-list, Mailing List)
- www.securityfocus.com/bid/11402 (Patch, VDB Entry, Third Party Advisory, vdb-entry, Broken Link)
- exchange.xforce.ibmcloud.com/vulnerabilities/17605 (VDB Entry, Third Party Advisory, vdb-entry)
- www.nextgenss.com/advisories/db205012005F.txt (Not Applicable)
- secunia.com/advisories/12733/ (Broken Link, Vendor Advisory, third-party-advisory)
- www-1.ibm.com/support/docview.wss (Broken Link)
Frequently asked questions
- What is CVE-2005-4868?
- CVE-2005-4868 is a high-severity vulnerability in IBM Db2 Universal Database, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.1/10. Published 2005-12-31.
- How severe is CVE-2005-4868?
- High severity. CVSS v3 base score is 7.1 out of 10.