medium4.6Public exploit code
CVE-2003-0898
IBM DB2 7.2 before FixPak 10a, and earlier versions including 7.1, allows local users to overwrite arbitrary files and gain privileges via a symlink attack on …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM DB2 db2job - File Overwrite2003-08-05 · local · unix · Verified
Impact
IBM DB2 7.2 before FixPak 10a, and earlier versions including 7.1, allows local users to overwrite arbitrary files and gain privileges via a symlink attack on (1) db2job and (2) db2job2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Db2 Universal Database | through 8.0 Version 7.1 |