CVE-2005-4871

MEDIO 4.3CVE-2005-4871 · Published 31/12/2005 · updated 16/06/2026

En resumen

CVE-2005-4871 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a db2 (ibm).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.1%, mayor que el 65.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
db2 ibm	`= 8.1`	No fix yet

Description

Certain XML functions in IBM DB2 8.1 run with the privileges of DB2 instead of the logged-in user, which allows remote attackers to create or overwrite files via (1) XMLFileFromVarchar or (2) XMLFileFromClob, or read files via (3) XMLVarcharFromFile or (4) XMLClobFromFile.

References

marc.info
secunia.com/advisories/12733 · Patch
ngssoftware.com/advisories/db205012005I.txt · Patch
securityfocus.com/bid/12170
exchange.xforce.ibmcloud.com/vulnerabilities/18761

Más vulnerabilidades de db2

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

db2

ibm

= 8.1

No fix yet

Más vulnerabilidades de db2

Ver todo →