CVE-2005-4864: Buffer Overflow
Published Dec 31, 2005
·Updated
Stack-based buffer overflow in libdb2.so in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long DB2LPORT environment variable.
Affected Software
20 affected components
IBM DB2 Universal Database=7.1
IBM DB2 Universal Database=8.1
IBM DB2 Universal Database=8.0
IBM DB2 Universal Database=7.0
IBM DB2 Universal Database=7.2
IBM DB2 Universal Database=7.0
IBM DB2 Universal Database=8.0
IBM DB2 Universal Database=8.1
IBM DB2 Universal Database=8.0
IBM DB2 Universal Database=7.1
IBM DB2 Universal Database=7.2
IBM DB2 Universal Database=7.2
IBM DB2 Universal Database=8.1
IBM DB2 Universal Database=8.1
IBM DB2 Universal Database=7.1
IBM DB2 Universal Database=7.0
IBM DB2 Universal Database=7.2
IBM DB2 Universal Database=7.1
IBM DB2 Universal Database=8.0
IBM DB2 Universal Database=7.0
Remediation
Patch Available
Patch Available
Patch Available
Event History
Dec 31, 2005
CVE Published
05:00 AM
Oct 7, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-4864?
CVE-2005-4864 is considered a critical vulnerability due to its potential to allow arbitrary code execution.
2
How do I fix CVE-2005-4864?
To fix CVE-2005-4864, ensure that the affected versions of IBM DB2 are updated to the latest secure versions provided by IBM.
3
Who is affected by CVE-2005-4864?
Local users of IBM DB2 versions 7.x and 8.1 on various operating systems are affected by CVE-2005-4864.
4
What causes CVE-2005-4864?
CVE-2005-4864 is caused by a stack-based buffer overflow resulting from a long DB2LPORT environment variable.
5
Can CVE-2005-4864 be exploited remotely?
CVE-2005-4864 is a local vulnerability, meaning it cannot be exploited remotely without local user access.