Vulnerability in Ibm Db2 Universal Database
CVE-2005-4868
Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, which allows local users to gain unauthorized access, gain sensitive information, such as cleartext passwords, and cause a denial of service.
EPSS: 0.008 (51.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H.
Affected products
- Ibm Db2_universal_database — versions 7.1, 7.2, 8.0
- Microsoft Windows
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Mailing List)
- cve@mitre.org (Patch, VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_MISC, Not Applicable)
- cve@mitre.org (x_refsource_SECUNIA, Broken Link, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Broken Link)
Frequently asked questions
- What is CVE-2005-4868?
- CVE-2005-4868 is a high-severity vulnerability in Ibm Db2 Universal Database, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.1/10. Published 2005-12-31.
- How severe is CVE-2005-4868?
- High severity. CVSS v3 base score is 7.1 out of 10.