CVE-2005-4866: IBM DB2 Universal Database

Medium severity, CVSS 6.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminator to be removed and leads to the overflow.

Affected products

• IBM DB2 Universal Database: version 7.0 only; version 7.1 only; version 7.2 only; version 8.0 only; version 8.1 only

Published 2005-12-31. Last modified 2026-06-16.