7.2
CVE-2004-1372
- EPSS 0.49%
- Veröffentlicht 01.09.2004 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:07:34
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Db2 Universal Database Version7.0 Editionlinux
Ibm ≫ Db2 Universal Database Version7.1 Editionlinux
Ibm ≫ Db2 Universal Database Version7.2 Editionlinux
Ibm ≫ Db2 Universal Database Version8.1 Editionaix
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.49% | 0.381 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
http://marc.info/?l=bugtraq&m=110382462924162&w=2
http://marc.info/?l=bugtraq&m=110382730431065&w=2
http://www.ngssoftware.com/advisories/db223122004K.txt
http://www.ngssoftware.com/advisories/db223122004L.txt
http://www.securityfocus.com/bid/11089
https://exchange.xforce.ibmcloud.com/vulnerabilities/18663
https://exchange.xforce.ibmcloud.com/vulnerabilities/18682