Back to CVE Browser

CVE-2003-1051

HIGH

7.2

CVSS Severity Score

EPSS Score0.1660%

EPSS Percentile31.62th

PublishedSep 28, 2004

Last ModifiedApr 16, 2026

Vulnerability Description

Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.

Affected Platforms (CPE)

📦

Ibm

Db2

= 9.0

References & Advisories

🔗 http://www.secnetops.com/research/advisories/SRT2003-11-06-0710.txt

🔗 http://www.securityfocus.com/archive/1/343804

🔗 http://www.securityfocus.com/bid/8989

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/13633

🔗 http://www.secnetops.com/research/advisories/SRT2003-11-06-0710.txt

🔗 http://www.securityfocus.com/archive/1/343804

🔗 http://www.securityfocus.com/bid/8989

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/13633

Related Vulnerabilities

CVE-2007-258210.0

Multiple buffer overflows in the DB2 JDBC Applet Server (DB2JDS) service in IBM DB2 9.x and earlier allow remote attackers to (1) ...

CVE-2005-486510.0

Stack-based buffer overflow in call in IBM DB2 7.x and 8.1 allows remote attackers to execute arbitrary code via a long libname.

CVE-2005-041710.0

Unknown "high risk" vulnerability in DB2 Universal Database 8.1 and earlier has unknown impact and attack vectors. NOTE: due to t...

CVE-2007-605110.0

IBM DB2 UDB 9.1 before Fixpak 4 assigns incorrect privileges to the (1) DB2ADMNS and (2) DB2USERS alternative groups, which has un...