CVE-2005-4868

HIGH

IBM DB2 Universal Database 8.1 - Unauthorized Access via Shared Memory Permissions

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-4868. PoCs published by Chris Anley.

AI-analyzed exploit summary This is a writeup describing an information disclosure vulnerability in IBM DB2 on Windows due to improper permissions on shared memory sections, allowing local users to read sensitive data such as credentials and query results.

Description

Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, which allows local users to gain unauthorized access, gain sensitive information, such as cleartext passwords, and cause a denial of service.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Chris Anley · textlocalwindows
https://www.exploit-db.com/exploits/24678

This is a writeup describing an information disclosure vulnerability in IBM DB2 on Windows due to improper permissions on shared memory sections, allowing local users to read sensitive data such as credentials and query results.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: IBM DB2 on Microsoft Windows
No auth needed
Prerequisites: Local access to the Windows system running IBM DB2
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=110495402231836&w=2
Broken Link, Patch, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/11402
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/17605
Broken Link, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/12733/

Scores

CVSS v3 7.1
EPSS 0.0076
EPSS Percentile 50.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Details

CWE
CWE-732
Status published
Products (4)
ibm/db2_universal_database 7.1
ibm/db2_universal_database 7.2
ibm/db2_universal_database 8.0
ibm/db2_universal_database 8.1
Published Dec 31, 2005
Tracked Since Feb 18, 2026