CVE-2004-1372

Published: Sep 1, 2004Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.

Affected (4)

Products: Ibm: Db2 Universal Database

Ibm

1 product

Db2 Universal Database

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Db2 Universal Database	Version 7.0
Ibm Db2 Universal Database	Version 7.1
Ibm Db2 Universal Database	Version 7.2
Ibm Db2 Universal Database	Version 8.1

References (14)

http://marc.info/?l=bugtraq&m=110382462924162&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=110382730431065&w=2

Source: cve@mitre.org

http://www.ngssoftware.com/advisories/db223122004K.txt

Source: cve@mitre.org

PatchVendor Advisory

http://www.ngssoftware.com/advisories/db223122004L.txt

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/11089

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/18663

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/18682

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=110382462924162&w=2