CVE-2003-1051 EXPLOIT
7.2
HIGH · CVSS 2.0 · EPSS 1.3% (pctl 69)
Patch early
A public exploit exists.
Description
Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.
Scoring
| CVSS | 7.2 (HIGH, v2.0) |
|---|---|
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
| EPSS | 1.26% — more likely to be exploited than 69% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2004-09-28 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| ibm | db2 |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | IBM DB2 - 'db2start' Format String Arbitrary Code Execution | 2003-11-07 |
| exploit-db | IBM DB2 - 'db2stop' Format String Arbitrary Code Execution | 2003-11-07 |
| exploit-db | IBM DB2 - 'db2govd' Format String Arbitrary Code Execution | 2003-11-07 |
References
- http://www.secnetops.com/research/advisories/SRT2003-11-06-0710.txt
- http://www.securityfocus.com/archive/1/343804
- http://www.securityfocus.com/bid/8989
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13633
- http://www.secnetops.com/research/advisories/SRT2003-11-06-0710.txt
- http://www.securityfocus.com/archive/1/343804
- http://www.securityfocus.com/bid/8989
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13633
→ the Explorer · watch your stack · NVD