CVE-2005-1872

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in the administrative console in IBM WebSphere Application Server 5.x, when the global security option is enabled, allows remote attackers to execute arbitrary code.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=111817727120752&w=2
http://secunia.com/advisories/15598/Patch, Vendor Advisory
http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24009775Patch, Vendor Advisory
http://www.appsecinc.com/resources/alerts/general/WEBSPHERE-001.htmlVendor Advisory
http://www.osvdb.org/17041Vendor Advisory
http://marc.info/?l=bugtraq&m=111817727120752&w=2
http://secunia.com/advisories/15598/Patch, Vendor Advisory
http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24009775Patch, Vendor Advisory
http://www.appsecinc.com/resources/alerts/general/WEBSPHERE-001.htmlVendor Advisory
http://www.osvdb.org/17041Vendor Advisory

Timeline

Published: Jun 3, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-18737.5Multiple buffer overflows in Crob FTP 3.6.1, and possibly earlier versions, allow remote attackers to execute arbitrary code via (1) an FTP CVE-2005-18745.0Directory traversal vulnerability in Dzip before 2.9 allows remote attackers to create arbitrary files via a filename containing a .. (dot d CVE-2005-18757.5Multiple SQL injection vulnerabilities in list.php in Exhibit Engine (EE) 1.22 allow remote attackers to execute arbitrary SQL commands via CVE-2005-18764.5Direct code injection vulnerability in CuteNews 1.3.6 and earlier allows remote attackers with administrative privileges to execute arbitrar CVE-2005-18774.3Cross-site scripting (XSS) vulnerability in view_ticket.php in Lpanel 1.59 and earlier allows remote attackers to inject arbitrary web scrip CVE-2005-18781.2GIPTables Firewall 1.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the temp.ip.addresses temporary f CVE-2005-18795.5LutelWall 0.97 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call CVE-2005-18805.5everybuddy 0.4.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system ca CVE-2005-18817.5upload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for uploaded image files, which allows remote attac CVE-2005-18827.5PHP remote file inclusion vulnerability in last_gallery.php in YaPiG 0.93u and 0.94u allows remote attackers to execute arbitrary PHP code v CVE-2005-18835.0global.php in YaPiG 0.92b allows remote attackers to include arbitrary local files via the BASE_DIR parameter.CVE-2005-18846.4Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attacke