CVE-2005-4866
Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to...
CVE-2005-4866 is a medium vulnerability (CVSS 6.8) in Ibm Db2 Universal Database, published December 31, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.55%, the 75th percentile. No source names a fixed version.
- Severity
- 6.8 MediumCVSS 2.0, NVD
- Exploit chance
- 1.55%EPSS, 75th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminator to be removed and leads to the overflow.
Exploit likelihood
Affected products
What each source reports
NVD Score used
Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminator to be removed and leads to the overflow.
- Record
CVE-2005-4866- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminator to be removed and leads to the overflow.
- Record
CVE-2005-4866- Updated
- 2026-11-02
EUVDEUVD-2005-4857No score
Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminator to be removed and leads to the overflow.
- Record
EUVD-2005-4857- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2w2j-gfqg-fwgmNo score
Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to...
Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminator to be removed and leads to the overflow.
- Record
GHSA-2w2j-gfqg-fwgm- Weakness
- CWE-119
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
www-1.ibm.com/support/docview.wss?uid=swg1IY61492
securityfocus.com/bid/11401
marc.info?l=bugtraq&m=110495251101381&w=2
secunia.com/advisories/12733
exchange.xforce.ibmcloud.com/vulnerabilities/17613
nextgenss.com/advisories/db205012005D.txt
nvd.nist.gov/vuln/detail/CVE-2005-4866
github.com/advisories/GHSA-2w2j-gfqg-fwgm