CVE-2004-1372

IBM DB2 7.x and 8.1 - Stack-Based Buffer Overflow via Long Argument to rec2xml or generate_distfile

Title source: llm
STIX 2.1

Description

Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.

References (7)

Core 7
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=110382462924162&w=2
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=110382730431065&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/18682
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/18663
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/11089
Patch, Vendor Advisory x_refsource_misc
http://www.ngssoftware.com/advisories/db223122004L.txt
Patch, Vendor Advisory x_refsource_misc
http://www.ngssoftware.com/advisories/db223122004K.txt

Scores

EPSS 0.0049
EPSS Percentile 39.2%

Details

Status published
Products (4)
ibm/db2_universal_database 7.0
ibm/db2_universal_database 7.1
ibm/db2_universal_database 7.2
ibm/db2_universal_database 8.1
Published Sep 01, 2004
Tracked Since Feb 18, 2026