CVE-2005-4866

Published: Dec 31, 2005Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminator to be removed and leads to the overflow.

Affected (24)

Products: Ibm: Db2 Universal Database

Ibm

1 product

Db2 Universal Database

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Ibm Db2 Universal Database	Version 7.0
Ibm Db2 Universal Database	Version 7.0
Ibm Db2 Universal Database	Version 7.0
Ibm Db2 Universal Database	Version 7.0
Ibm Db2 Universal Database	Version 7.1
Ibm Db2 Universal Database	Version 7.1
Ibm Db2 Universal Database	Version 7.1
Ibm Db2 Universal Database	Version 7.1
Ibm Db2 Universal Database	Version 7.1
Ibm Db2 Universal Database	Version 7.2
Ibm Db2 Universal Database	Version 7.2
Ibm Db2 Universal Database	Version 7.2
Ibm Db2 Universal Database	Version 7.2
Ibm Db2 Universal Database	Version 7.2
Ibm Db2 Universal Database	Version 8.0
Ibm Db2 Universal Database	Version 8.0
Ibm Db2 Universal Database	Version 8.0
Ibm Db2 Universal Database	Version 8.0
Ibm Db2 Universal Database	Version 8.0
Ibm Db2 Universal Database	Version 8.1
Ibm Db2 Universal Database	Version 8.1
Ibm Db2 Universal Database	Version 8.1
Ibm Db2 Universal Database	Version 8.1
Ibm Db2 Universal Database	Version 8.1