Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2005-4867

Опубликовано: 31 дек. 2005
Источник: nvd
CVSS2: 9.3
EPSS Средний

Описание

Stack-based buffer overflow in the SATENCRYPT function in IBM DB2 8.1, when Satellite Administration (SATADMIN) is enabled, allows remote attackers to execute arbitrary code via a long parameter.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:db2_universal_database:7.0:*:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.0:*:hp-ux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.0:*:linux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.0:*:solaris:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.1:*:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.1:*:hp-ux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.1:*:linux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.1:*:solaris:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.1:*:windows:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.2:*:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.2:*:hp-ux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.2:*:linux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.2:*:solaris:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:7.2:*:windows:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.0:*:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.0:*:hp-ux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.0:*:solaris:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.0:*:windows:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1:*:hp_ux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1:*:linux:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1:*:solaris:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1:*:windows:*:*:*:*:*

EPSS

Процентиль: 95%
0.20526
Средний

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

github
почти 4 года назад

Stack-based buffer overflow in the SATENCRYPT function in IBM DB2 8.1, when Satellite Administration (SATADMIN) is enabled, allows remote attackers to execute arbitrary code via a long parameter.

EPSS

Процентиль: 95%
0.20526
Средний

9.3 Critical

CVSS2

Дефекты

CWE-119