| Vulnerability Name: | CVE-2003-0836 (CCN-13330) | ||||||||
| Assigned: | 2003-10-01 | ||||||||
| Published: | 2003-10-01 | ||||||||
| Updated: | 2022-08-16 | ||||||||
| Summary: | Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 before Fixpak 10 and 10a, and 8.1 before Fixpak 2, allows attackers with "Connect" privileges to execute arbitrary code via a LOAD command. | ||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: CCN Type: Pentest Limited Security Advisory ptl-2003-01 IBM DB2 LOAD Command Stack Overflow Vulnerability Source: MITRE Type: CNA CVE-2003-0836 Source: CCN Type: IBM DB2 Technical Support Web site DB2 Universal Database for Linux, UNIX and Windows Source: CCN Type: OSVDB ID: 2629 IBM DB2 LOAD Command Overflow Source: CCN Type: OSVDB ID: 9490 IBM DB2 Connect Privilege LOAD Command Overflow Source: CCN Type: BID-8742 IBM DB2 Remote LOAD Command Buffer Overrun Vulnerability Source: XF Type: UNKNOWN db2-load-bo(13330) Source: MISC Type: UNKNOWN https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2003-0836 | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||