Lucene search
MitreCVE-2004-0795HistoryOct 20, 2004 - 4:00 a.m.
CVE-2004-0795
2004-10-2004:00:00
mitre
web.nvd.nist.gov
27
db2
remote command
server
privilege escalation
security vulnerability
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.2
Confidence
Low
EPSS
0.019
Percentile
88.8%
DB2 8.1 remote command server (DB2RCMD.EXE) executes the db2rcmdc.exe program as the db2admin administrator, which allows local users to gain privileges via the DB2REMOTECMD named pipe.
Affected configurations
Node
ibmdb2_universal_databaseMatch8.1aix
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | db2_universal_database | 8.1 | cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:* |
Related
packetstorm
packetstorm
IBM DB2 Db2rcmd.exe Command Execution
2024-08-31 00:00:00
metasploit
metasploit
IBM DB2 db2rcmd.exe Command Execution Vulnerability
2008-11-11 02:44:28
cvelist
cvelist
CVE-2004-0795
2004-08-20 04:00:00
nvd
nvd
CVE-2004-0795
2004-10-20 04:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.2
Confidence
Low
EPSS
0.019
Percentile
88.8%
Related for CVE-2004-0795