CVEvulnerability

CVE-2003-1051

7.2 HIGH Published 2004-09-28 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2004-09-28
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.

Affected configurations

• ibm db2 9.0

References

http://www.secnetops.com/research/advisories/SRT2003-11-06-0710.txt www.secnetops.com
http://www.securityfocus.com/archive/1/343804 Vendor Advisory
http://www.securityfocus.com/bid/8989 Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/13633 exchange.xforce.ibmcloud.com
http://www.secnetops.com/research/advisories/SRT2003-11-06-0710.txt www.secnetops.com
http://www.securityfocus.com/archive/1/343804 Vendor Advisory
http://www.securityfocus.com/bid/8989 Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/13633 exchange.xforce.ibmcloud.com