7.1

CVE-2005-4868

Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, which allows local users to gain unauthorized access, gain sensitive information, such as cleartext passwords, and cause a denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Db2 Universal Database Version7.1
   Microsoft ≫ Windows Version-
Ibm ≫ Db2 Universal Database Version7.2
   Microsoft ≫ Windows Version-
Ibm ≫ Db2 Universal Database Version8.0
   Microsoft ≫ Windows Version-
Ibm ≫ Db2 Universal Database Version8.1
   Microsoft ≫ Windows Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.76% 0.505
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

http://www-1.ibm.com/support/docview.wss?uid=swg21181228
Broken Link
http://secunia.com/advisories/12733/
Vendor Advisory
Broken Link
http://marc.info/?l=bugtraq&m=110495402231836&w=2
Mailing List
http://www.nextgenss.com/advisories/db205012005F.txt
Not Applicable
http://www.securityfocus.com/bid/11402
Patch
Third Party Advisory
Broken Link
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/17605
Third Party Advisory
VDB Entry