vulnwire
7.1high

CVE-2005-48681 exploit

Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, which allows local user…

Published 20 y ago · modified 4 mo ago · JSON

CVSS
7.1
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
0.8%
percentile 55%
Public exploits
1
Exploit-DB

Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, which allows local users to gain unauthorized access, gain sensitive information, such as cleartext passwords, and cause a denial of service.

Exploit prediction (EPSS)

0.76% probability of exploitation in the next 30 days, higher than 55% of all scored CVEs.

Exploits and detections

  • EDB-24678 IBM DB2 - Universal Database Information Disclosure · local · 2004-09-01

CVSS scores

Assigned byVersionScoreVector
NVD3.17.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
NVD2.02.1AV:L/AC:L/Au:N/C:P/I:N/A:N

Classification

Weakness
  • CWE-732 Incorrect Permission Assignment for Critical Resource

References

  • marc.info /?l=bugtraq&m=110495402231836&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/11402 · vdb-entry, x_refsource_BID, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/17605 · vdb-entry, x_refsource_XF, x_transferred
  • nextgenss.com /advisories/db205012005F.txt · x_refsource_MISC, x_transferred
  • secunia.com /advisories/12733/ · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • www-1.ibm.com /support/docview.wss?uid=swg21181228 · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.