Unscored CVE-2005-4864 EUVD-2005-4855GHSA-hv4v-qgpx-4225

Stack-based buffer overflow in libdb2.so in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long DB2LPORT environmen…

Published Oct 6, 2007 · Updated Aug 8, 2024 · Assigned by mitre

Description

Stack-based buffer overflow in libdb2.so in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long DB2LPORT environment variable.

References

11390 vdb-entry
IY62042 vendor-advisory
db2-db2lport-bo(17616) vdb-entry
20050105 IBM DB2 libdb2.so buffer overflow (#NISR05012005B) mailing-list
12733 third-party-advisory
http://www.ngssoftware.com/advisories/db205012005B.txt