PT-2003-1945 · Ibm · Ibm Db2

Juan Manuel Pascual Escriba + 1 · Published 2003-10-28 · Updated 2016-10-18 · CVE-2003-0898

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 7.1 through 7.2 before FixPak 10a

Description The issue allows local users to overwrite arbitrary files and gain privileges via a symlink attack on (1) db2job and (2) db2job2.

Recommendations For IBM DB2 versions 7.1 through 7.2 before FixPak 10a, apply FixPak 10a to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2003-0898

Affected Products

Ibm Db2

References · 4

• 🔥 https://exploit-db.com/exploits/22988 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0898 · Security Note
• http://marc.info/?l=bugtraq&m=106010332721672&w=2 · Note
• ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2aixv7/FP10a_U495172/FixpakReadme.txt · Note