CVE-2005-4735: Medium severity ibm db2 universal database vulnerability

Published Dec 31, 2005
·
Updated

IBM DB2 Universal Database (UDB) 810 before 8.1 FP10 allows remote authenticated users to cause a denial of service (application crash) via (1) certain equality predicates that trigger self-removal, aka IY70808; and (2) a query with more than 32000 elements in the IN-list, aka LI70817.

Affected Software

12 affected components
IBM DB2 Universal Database=8.1.4
IBM DB2 Universal Database=8.1.6
IBM DB2 Universal Database=8.1
IBM DB2 Universal Database=8.1.8a
IBM DB2 Universal Database=8.1.6c
IBM DB2 Universal Database=8.1.8
IBM DB2 Universal Database=8.1.7b
IBM DB2 Universal Database=8.0
IBM DB2 Universal Database=8.1.5
IBM DB2 Universal Database=8.1.7
IBM DB2 Universal Database=8.1.9a
IBM DB2 Universal Database=8.1.9

Event History

Dec 31, 2005
CVE Published
05:00 AM
Mar 19, 2006
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2005-4735?

CVE-2005-4735 has a severity level that indicates it can cause an application crash, resulting in denial of service.

2

How do I fix CVE-2005-4735?

To address CVE-2005-4735, it is recommended to upgrade IBM DB2 Universal Database to version 8.1 FP10 or later.

3

What versions of IBM DB2 Universal Database are affected by CVE-2005-4735?

CVE-2005-4735 affects multiple versions of IBM DB2 Universal Database including 8.0, 8.1.4, 8.1.5, 8.1.6, 8.1.7, and 8.1.8.

4

Can CVE-2005-4735 be exploited remotely?

Yes, CVE-2005-4735 can be exploited by remote authenticated users, leading to application crashes.

5

What are the specific conditions that trigger CVE-2005-4735?

CVE-2005-4735 can be triggered by certain equality predicates that cause self-removal or by queries with more than 32,000 elements in the IN-list.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203