CVE-2005-4871: Medium severity IBM DB2 vulnerability
Certain XML functions in IBM DB2 8.1 run with the privileges of DB2 instead of the logged-in user, which allows remote attackers to create or overwrite files via (1) XMLFileFromVarchar or (2) XMLFileFromClob, or read files via (3) XMLVarcharFromFile or (4) XMLClobFromFile.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4871?
CVE-2005-4871 has been categorized as a critical vulnerability due to the ability for remote attackers to access and manipulate files.
How can I fix CVE-2005-4871?
To mitigate CVE-2005-4871, upgrade to a version of IBM DB2 that is not affected by this vulnerability.
What types of attacks can be performed due to CVE-2005-4871?
CVE-2005-4871 allows remote attackers to create, overwrite, or read files on the server via certain XML function calls.
Which versions of IBM DB2 are affected by CVE-2005-4871?
CVE-2005-4871 specifically affects IBM DB2 version 8.1.
What are the XML functions involved in CVE-2005-4871?
The vulnerable XML functions involved in CVE-2005-4871 are XMLFileFromVarchar, XMLFileFromClob, XMLVarcharFromFile, and XMLClobFromFile.