CVE-2003-0898

IBM DB2 7.2 before FixPak 10a, and earlier versions including 7.1, allows local users to overwrite arbitrary files and gain privileges via a symlink attack on (1) db2job and (2) db2job2.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2003-11-17

Last modified

2024-08-08

Affected products

• Db2 Universal Database (Ibm)

References

• http://marc.info/?l=bugtraq&m=106010332721672&w=2