CVE-2005-4735

MediumCVSS 6.8/10Last modified Jun 16, 2026

Description

IBM DB2 Universal Database (UDB) 810 before 8.1 FP10 allows remote authenticated users to cause a denial of service (application crash) via (1) certain equality predicates that trigger self-removal, aka IY70808; and (2) a query with more than 32000 elements in the IN-list, aka LI70817.

Metrics

CVSS 2.0 6.8/10AV:N/AC:L/Au:S/C:N/I:N/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/17031Exploit, Patch, Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IY70808Exploit, Patch
http://www-1.ibm.com/support/docview.wss?uid=swg1LI70817Exploit, Patch
http://www.securityfocus.com/bid/15126Patch
http://secunia.com/advisories/17031Exploit, Patch, Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IY70808Exploit, Patch
http://www-1.ibm.com/support/docview.wss?uid=swg1LI70817Exploit, Patch
http://www.securityfocus.com/bid/15126Patch

Timeline

Published: Dec 31, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-47366.8IBM DB2 Universal Database (UDB) 820 before 8.2 FP10 allows remote authenticated users to cause a denial of service (disk consumption) via a CVE-2005-47377.5IBM DB2 Universal Database (UDB) 820 before ESE AIX 5765F4100 allows remote authenticated users to cause a denial of service (CPU consumptio CVE-2005-47386.5IBM DB2 Universal Database (UDB) 810 before ESE AIX 5765F4100 does not ensure that a user has execute privileges before permitting object cr CVE-2005-47396.8IBM DB2 Universal Database (UDB) 820 before version 8 FixPak 10 (s050811) allows remote authenticated users to cause a denial of service (ap CVE-2005-47404.0IBM DB2 Universal Database (UDB) 810 before version 8 FixPak 10 allows remote authenticated users to cause a denial of service (db2jd servic CVE-2005-47417.5NetBSD 1.6, NetBSD 2.0 through 2.1, and NetBSD-current before 20051031 allows local users to gain privileges by attaching a debugger to a se CVE-2005-47424.9Unspecified vulnerability in Echelog 0.6.2 allows attackers to "exploit function stacks on some architectures," with unknown impact and atta CVE-2005-47435.0Multiple SQL injection vulnerabilities in index.php in NeLogic Nephp Publisher 4.5.2 and earlier allow remote attackers to execute arbitrary CVE-2005-47446.4Off-by-one error in the sql_error function in sql_unixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might all CVE-2005-47457.5SQL injection vulnerability in the rlm_sqlcounter module in FreeRADIUS 1.0.3 and 1.0.4 allows remote attackers to execute arbitrary SQL comm CVE-2005-47467.8Multiple buffer overflows in FreeRADIUS 1.0.3 and 1.0.4 allow remote attackers to cause denial of service (crash) via (1) the rlm_sqlcounter CVE-2005-47474.3Cross-site scripting (XSS) vulnerability in WebHost Automation Ltd Helm before 3.2.6 allows remote attackers to inject arbitrary web script