返回 CVE 浏览器

CVE-2003-1051

HIGH

7.2

CVSS Severity Score

EPSS Score0.1660%

EPSS Percentile31.62th

Published2004年9月28日

Last Modified2026年4月16日

Vulnerability Description

Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.

Affected Platforms (CPE)

📦

Ibm

Db2

= 9.0

References & Advisories

🔗 http://www.secnetops.com/research/advisories/SRT2003-11-06-0710.txt

🔗 http://www.securityfocus.com/archive/1/343804

🔗 http://www.securityfocus.com/bid/8989

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/13633

🔗 http://www.secnetops.com/research/advisories/SRT2003-11-06-0710.txt

🔗 http://www.securityfocus.com/archive/1/343804

🔗 http://www.securityfocus.com/bid/8989

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/13633

相关漏洞威胁

CVE-2007-258210.0

Multiple buffer overflows in the DB2 JDBC Applet Server (DB2JDS) service in IBM DB2 9.x and earlier allow remote attackers to (1) ...

CVE-2005-486510.0

Stack-based buffer overflow in call in IBM DB2 7.x and 8.1 allows remote attackers to execute arbitrary code via a long libname.

CVE-2005-041710.0

Unknown "high risk" vulnerability in DB2 Universal Database 8.1 and earlier has unknown impact and attack vectors. NOTE: due to t...

CVE-2007-605110.0

IBM DB2 UDB 9.1 before Fixpak 4 assigns incorrect privileges to the (1) DB2ADMNS and (2) DB2USERS alternative groups, which has un...