CVE-2005-4866
Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to...
Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminator to be removed and leads to the overflow.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminator to be removed and leads to the overflow.
- Record
CVE-2005-4866- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminator to be removed and leads to the overflow.
- Record
CVE-2005-4866- Updated
- 2026-11-02
EUVDEUVD-2005-4857 No score
Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminator to be removed and leads to the overflow.
- Record
EUVD-2005-4857- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2w2j-gfqg-fwgm No score
Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to...
Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminator to be removed and leads to the overflow.
- Record
GHSA-2w2j-gfqg-fwgm- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-4866 is a medium vulnerability (CVSS 6.8) in Ibm Db2 Universal Database, published December 31, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.55%, the 75th percentile. No source names a fixed version.
References
www-1.ibm.com/support/docview.wss?uid=swg1IY61492
securityfocus.com/bid/11401
marc.info?l=bugtraq&m=110495251101381&w=2
secunia.com/advisories/12733
exchange.xforce.ibmcloud.com/vulnerabilities/17613
nextgenss.com/advisories/db205012005D.txt
nvd.nist.gov/vuln/detail/CVE-2005-4866
github.com/advisories/GHSA-2w2j-gfqg-fwgm