Lucene search

K
cveMitreCVE-2003-0836
HistoryNov 17, 2003 - 5:00 a.m.

CVE-2003-0836

2003-11-1705:00:00
mitre
web.nvd.nist.gov
34
ibm
db2
udb
stack-based buffer overflow
cve-2003-0836
security vulnerability
fixpak 10
fixpak 10a
fixpak 2
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.005

Percentile

77.0%

Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 before Fixpak 10 and 10a, and 8.1 before Fixpak 2, allows attackers with “Connect” privileges to execute arbitrary code via a LOAD command.

Affected configurations

Nvd
Node
ibmdb2_universal_databaseMatch7.2linux
OR
ibmdb2_universal_databaseMatch8.1aix
VendorProductVersionCPE
ibmdb2_universal_database7.2cpe:2.3:a:ibm:db2_universal_database:7.2:*:linux:*:*:*:*:*
ibmdb2_universal_database8.1cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.005

Percentile

77.0%

Related for CVE-2003-0836