CVE-2003-1049 — IBM DB2 Universal Database vulnerability

4 documents4 sources
Severity
4.6MEDIUMNVD
EPSS
0.1%
top 83.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM DB2 Universal Database
Timeline
PublishedSep 28
Latest updateApr 29

Description

IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions (777), which allows local users to modify or delete certain DB2 files.

CVSS vector

AV:L/AC:L/C:P/I:P/A:PExploitability: 3.9 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-mc4m-2wm2-gw2m: IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions (777), which allows local users to modify or d↗2022-04-29
▶
CVEList
CVE-2003-1049: IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions (777), which allows local users to modify or d↗2004-08-20
▶

💥Exploits & PoCs

1
Exploit-DB
Twilight WebServer 1.3.3.0 - 'GET' Remote Denial of Service↗2003-07-07
▶
CVE-2003-1049 — IBM vulnerability | cvebase