Lucene search

MitreCVE-2005-3643

HistoryNov 16, 2005 - 9:22 p.m.

CVE-2005-3643

2005-11-1621:22:00

mitre

web.nvd.nist.gov

ibm

db2

windows xp

authentication bypass

remote attack

security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.006

Percentile

78.4%

JSON

IBM DB2 Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account without supplying a password.

Affected configurations

Nvd

Node

ibmdb2_universal_databaseMatch7.1linux

ibmdb2_universal_databaseMatch7.2linux

ibmdb2_universal_databaseMatch8.0linux

ibmdb2_universal_databaseMatch8.1aix

ibmdb2_universal_databaseMatch8.1.4

ibmdb2_universal_databaseMatch8.1.5

ibmdb2_universal_databaseMatch8.1.6

ibmdb2_universal_databaseMatch8.1.6c

ibmdb2_universal_databaseMatch8.1.7

ibmdb2_universal_databaseMatch8.1.7b

ibmdb2_universal_databaseMatch8.1.8

ibmdb2_universal_databaseMatch8.1.8a

ibmdb2_universal_databaseMatch8.1.9

ibmdb2_universal_databaseMatch8.1.9a

VendorProductVersionCPE
ibmdb2_universal_database7.1cpe:2.3:a:ibm:db2_universal_database:7.1:*:linux:*:*:*:*:*
ibmdb2_universal_database7.2cpe:2.3:a:ibm:db2_universal_database:7.2:*:linux:*:*:*:*:*
ibmdb2_universal_database8.0cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*
ibmdb2_universal_database8.1cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*
ibmdb2_universal_database8.1.4cpe:2.3:a:ibm:db2_universal_database:8.1.4:*:*:*:*:*:*:*
ibmdb2_universal_database8.1.5cpe:2.3:a:ibm:db2_universal_database:8.1.5:*:*:*:*:*:*:*
ibmdb2_universal_database8.1.6cpe:2.3:a:ibm:db2_universal_database:8.1.6:*:*:*:*:*:*:*
ibmdb2_universal_database8.1.6ccpe:2.3:a:ibm:db2_universal_database:8.1.6c:*:*:*:*:*:*:*
ibmdb2_universal_database8.1.7cpe:2.3:a:ibm:db2_universal_database:8.1.7:*:*:*:*:*:*:*
ibmdb2_universal_database8.1.7bcpe:2.3:a:ibm:db2_universal_database:8.1.7b:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	db2_universal_database	7.1	cpe:2.3:a:ibm:db2_universal_database:7.1::linux:::::
ibm	db2_universal_database	7.2	cpe:2.3:a:ibm:db2_universal_database:7.2::linux:::::
ibm	db2_universal_database	8.0	cpe:2.3:a:ibm:db2_universal_database:8.0::linux:::::
ibm	db2_universal_database	8.1	cpe:2.3:a:ibm:db2_universal_database:8.1::aix:::::
ibm	db2_universal_database	8.1.4	cpe:2.3:a:ibm:db2_universal_database:8.1.4:::::::*
ibm	db2_universal_database	8.1.5	cpe:2.3:a:ibm:db2_universal_database:8.1.5:::::::*
ibm	db2_universal_database	8.1.6	cpe:2.3:a:ibm:db2_universal_database:8.1.6:::::::*
ibm	db2_universal_database	8.1.6c	cpe:2.3:a:ibm:db2_universal_database:8.1.6c:::::::*
ibm	db2_universal_database	8.1.7	cpe:2.3:a:ibm:db2_universal_database:8.1.7:::::::*
ibm	db2_universal_database	8.1.7b	cpe:2.3:a:ibm:db2_universal_database:8.1.7b:::::::*

Rows per page:

1-10 of 141

References

www.ngssoftware.com/papers/database-on-xp.pdf

www.securityfocus.com/bid/15452

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.006

Percentile

78.4%

JSON

Related for CVE-2005-3643