CVE-2005-4867: Buffer Overflow
Published Dec 31, 2005
·Updated
Stack-based buffer overflow in the SATENCRYPT function in IBM DB2 8.1, when Satellite Administration (SATADMIN) is enabled, allows remote attackers to execute arbitrary code via a long parameter.
Affected Software
24 affected components
IBM DB2 Universal Database=7.0
IBM DB2 Universal Database=7.0
IBM DB2 Universal Database=7.0
IBM DB2 Universal Database=7.0
IBM DB2 Universal Database=7.1
IBM DB2 Universal Database=7.1
IBM DB2 Universal Database=7.1
IBM DB2 Universal Database=7.1
IBM DB2 Universal Database=7.1
IBM DB2 Universal Database=7.2
IBM DB2 Universal Database=7.2
IBM DB2 Universal Database=7.2
IBM DB2 Universal Database=7.2
IBM DB2 Universal Database=7.2
IBM DB2 Universal Database=8.0
IBM DB2 Universal Database=8.0
IBM DB2 Universal Database=8.0
IBM DB2 Universal Database=8.0
IBM DB2 Universal Database=8.0
IBM DB2 Universal Database=8.1
IBM DB2 Universal Database=8.1
IBM DB2 Universal Database=8.1
IBM DB2 Universal Database=8.1
IBM DB2 Universal Database=8.1
Remediation
Patch Available
Patch Available
Patch Available
Event History
Dec 31, 2005
CVE Published
05:00 AM
Oct 7, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-4867?
CVE-2005-4867 is classified as a critical severity vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2005-4867?
To fix CVE-2005-4867, it is recommended to apply the appropriate patches provided by IBM for affected versions of DB2.
3
Which versions of IBM DB2 are affected by CVE-2005-4867?
CVE-2005-4867 affects IBM DB2 versions 7.0, 7.1, 7.2, 8.0, and 8.1 on multiple operating systems.
4
What type of vulnerability is CVE-2005-4867?
CVE-2005-4867 is a stack-based buffer overflow vulnerability that can lead to arbitrary code execution.
5
Can CVE-2005-4867 be exploited remotely?
Yes, CVE-2005-4867 allows remote attackers to exploit the vulnerability if Satellite Administration is enabled.