PT-2003-1945 · Ibm · Ibm Db2

Juan Manuel Pascual Escriba + 1 · Publicado 2003-10-28 · Atualizado 2016-10-18 · CVE-2003-0898

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 7.1 through 7.2 before FixPak 10a

Description The issue allows local users to overwrite arbitrary files and gain privileges via a symlink attack on (1) db2job and (2) db2job2.

Recommendations For IBM DB2 versions 7.1 through 7.2 before FixPak 10a, apply FixPak 10a to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2003-0898

Produtos afetados

Ibm Db2

Referências · 4

• 🔥 https://exploit-db.com/exploits/22988 · Exploit
• http://marc.info/?l=bugtraq&m=106010332721672&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0898 · Nota de Segurança
• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2aixv7/FP10a_U495172/FixpakReadme.txt · Nota