CVE-2005-4868

Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, which allows local users to gain unauthorized access, gain sensitive information, such as cleartext passwords, and cause a denial of service.

• CWE-732

• http://marc.info/?l=bugtraq&m=110495402231836&w=2Mailing List
• http://secunia.com/advisories/12733/Broken Link, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg21181228Broken Link
• http://www.nextgenss.com/advisories/db205012005F.txtNot Applicable
• http://www.securityfocus.com/bid/11402Broken Link, Patch, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17605Third Party Advisory, VDB Entry
• http://marc.info/?l=bugtraq&m=110495402231836&w=2Mailing List
• http://secunia.com/advisories/12733/Broken Link, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg21181228Broken Link
• http://www.nextgenss.com/advisories/db205012005F.txtNot Applicable
• http://www.securityfocus.com/bid/11402Broken Link, Patch, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17605Third Party Advisory, VDB Entry

Published

Dec 31, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-4862The search functionality in XWiki 0.9.793 indexes cleartext …
• CVE-2005-4863Stack-based buffer overflow in db2fmp in IBM DB2 7.x and 8.1…
• CVE-2005-4864Stack-based buffer overflow in libdb2.so in IBM DB2 7.x and …
• CVE-2005-4865Stack-based buffer overflow in call in IBM DB2 7.x and 8.1 a…
• CVE-2005-4866Stack-based buffer overflow in JDBC Applet Server in IBM DB2…
• CVE-2005-4867Stack-based buffer overflow in the SATENCRYPT function in IB…
• CVE-2005-4869The (1) to_char and (2) to_date function in IBM DB2 8.1 allo…
• CVE-2005-4870Stack-based buffer overflows in the (1) xmlvarcharfromfile, …
• CVE-2005-4871Certain XML functions in IBM DB2 8.1 run with the privileges…
• CVE-2005-4872Perl-Compatible Regular Expression (PCRE) library before 6.2…
• CVE-2005-4873Multiple stack-based buffer overflows in the phpcups PHP mod…
• CVE-2005-4874The XMLHttpRequest object in Mozilla 1.7.8 supports the HTTP…