Vulnerabilities > CVE-2003-0898 - Local Security vulnerability in Db2 Universal Database 7.1/8.0

047910
CVSS 4.6 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
local
low complexity
ibm
exploit available
NVD
Published: 2003-11-17
Updated: 2016-10-18

Summary

IBM DB2 7.2 before FixPak 10a, and earlier versions including 7.1, allows local users to overwrite arbitrary files and gain privileges via a symlink attack on (1) db2job and (2) db2job2.

Vulnerable Configurations

Part Description Count
Application
Ibm
2

Exploit-Db

descriptionIBM DB2 db2job File Overwrite Vulnerability. CVE-2003-0898. Local exploit for unix platform
idEDB-ID:22988
last seen2016-02-02
modified2003-08-05
published2003-08-05
reporterJuan Manuel Pascual Escribá
sourcehttps://www.exploit-db.com/download/22988/
titleIBM DB2 db2job File Overwrite Vulnerability

References