Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Db2 | Ibm | 9.0 (including) | 9.0 (including) |
References
- http://www.secnetops.com/research/advisories/SRT2003-11-06-0710.txt
- http://www.securityfocus.com/archive/1/343804
- http://www.securityfocus.com/bid/8989
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13633
- http://www.secnetops.com/research/advisories/SRT2003-11-06-0710.txt
- http://www.securityfocus.com/archive/1/343804
- http://www.securityfocus.com/bid/8989
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13633