Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.6
CVSSv2

CVE-2003-0898

Published: 17/11/2003 Updated: 18/10/2016
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
VMScore: 465
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Db2 Universal Database

Vulnerability Summary

IBM DB2 7.2 before FixPak 10a, and previous versions versions including 7.1, allows local users to overwrite arbitrary files and gain privileges via a symlink attack on (1) db2job and (2) db2job2.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm db2 universal database

ibm db2 universal database 7.1

Exploits

Exploit DB: IBM DB2 db2job - File Overwrite
source: wwwsecurityfocuscom/bid/8344/info IBM's DB2 database ships with a utility called db2job, installed with permissions 4550 and owned by rootdb2asgrp It has been reported that db2job writes to a number of files with root privileges The files written to are created with 0770 permissions (owner, group writeable) and are owned by r ...

References

NVD-CWE-Otherftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2aixv7/FP10a_U495172/FixpakReadme.txthttp://marc.info/?l=bugtraq&m=106010332721672&w=2https://nvd.nist.govhttps://www.exploit-db.com/exploits/22988/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereferenceCVE-2023-52689CVE-2024-23803client sideCVE-2023-52696information disclosureCVE-2024-35843CVE-2024-27130CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook