Exploitation Summary
EIP tracks 3 public exploits for CVE-2003-1050. PoCs published by SNOSoft.
AI-analyzed exploit summary The exploit demonstrates a buffer overflow vulnerability in IBM DB2 by passing an excessively long argument to the 'db2stop' binary, resulting in a segmentation fault. This indicates potential for arbitrary code execution with elevated privileges.
Description
Multiple buffer overflows in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via long command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.
Exploits (3)
The exploit demonstrates a buffer overflow vulnerability in IBM DB2 by passing an excessively long argument to the 'db2stop' binary, resulting in a segmentation fault. This indicates potential for arbitrary code execution with elevated privileges.
This exploit demonstrates a buffer overflow vulnerability in IBM DB2 by supplying an excessively long command-line argument to the 'db2start' binary, resulting in a segmentation fault. The PoC uses Perl to generate a long string of 'A' characters to trigger the overflow.
This exploit demonstrates a local buffer overflow vulnerability in IBM DB2 binaries, specifically targeting the 'db2govd' executable. By supplying an excessively long command-line argument, an attacker can trigger a segmentation fault, potentially leading to arbitrary code execution with elevated privileges.