Exploitation Summary
EIP tracks 1 public exploit for CVE-2003-0898. PoCs published by Juan Manuel Pascual Escribá.
AI-analyzed exploit summary This exploit leverages a symbolic link vulnerability in IBM DB2's db2job utility to overwrite sensitive files (e.g., /etc/passwd, /etc/shadow) with root privileges, enabling local privilege escalation. The script creates a malicious cron job to add a backdoor user with UID 0.
Description
IBM DB2 7.2 before FixPak 10a, and earlier versions including 7.1, allows local users to overwrite arbitrary files and gain privileges via a symlink attack on (1) db2job and (2) db2job2.
Exploits (1)
This exploit leverages a symbolic link vulnerability in IBM DB2's db2job utility to overwrite sensitive files (e.g., /etc/passwd, /etc/shadow) with root privileges, enabling local privilege escalation. The script creates a malicious cron job to add a backdoor user with UID 0.