Lucene search

MitreCVE-2003-0837

HistoryNov 17, 2003 - 5:00 a.m.

CVE-2003-0837

2003-11-1705:00:00

mitre

web.nvd.nist.gov

ibm

db2

udb

7.2

windows

stack-based buffer overflow

cve-2003-0837

security vulnerability

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.008

Percentile

81.3%

JSON

Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 for Windows, before Fixpak 10a, allows attackers with “Connect” privileges to execute arbitrary code via the INVOKE command.

Affected configurations

Nvd

Node

ibmdb2_universal_databaseMatch7.2linux

VendorProductVersionCPE
ibmdb2_universal_database7.2cpe:2.3:a:ibm:db2_universal_database:7.2:*:linux:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	db2_universal_database	7.2	cpe:2.3:a:ibm:db2_universal_database:7.2::linux:::::

References

marc.info/?l=bugtraq&m=106503709914622&w=2

www.securityfocus.com/bid/8743

exchange.xforce.ibmcloud.com/vulnerabilities/13331

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.008

Percentile

81.3%

JSON

Related for CVE-2003-0837