Ibm · Ibm Db2 · CVE-2003-0898
**Name of the Vulnerable Software and Affected Versions**
IBM DB2 versions 7.1 through 7.2 before FixPak 10a
**Description**
The issue allows local users to overwrite arbitrary files and gain privileges via a symlink attack on (1) db2job and (2) db2job2.
**Recommendations**
For IBM DB2 versions 7.1 through 7.2 before FixPak 10a, apply FixPak 10a to resolve the issue.