CVE-2003-0836: Buffer Overflow

Published Oct 8, 2003

Updated

Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 before Fixpak 10 and 10a, and 8.1 before Fixpak 2, allows attackers with "Connect" privileges to execute arbitrary code via a LOAD command.

Affected Software

2 affected components

IBM DB2 Universal Database=8.1

IBM DB2 Universal Database=7.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM DB2 Universal Database 7.2 to a version that resolves this vulnerability.
Fixed in Fixpak 10
Upgrade
Upgrade IBM DB2 Universal Database 8.1 to a version that resolves this vulnerability.
Fixed in Fixpak 2

Event History

Oct 8, 2003

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Nov 17, 2003

Data Sourced

via NVD·05:00 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2003-0836?

CVE-2003-0836 is classified as a high-severity vulnerability due to its potential to allow attackers to execute arbitrary code.

How do I fix CVE-2003-0836?

To mitigate CVE-2003-0836, users should upgrade to IBM DB2 Universal Database Version 8.1 Fixpak 2 or Version 7.2 Fixpak 10 or later.

Who is affected by CVE-2003-0836?

CVE-2003-0836 affects users of IBM DB2 Universal Database 7.2 prior to Fixpak 10 and 8.1 prior to Fixpak 2.

What types of attacks can result from CVE-2003-0836?

CVE-2003-0836 can allow attackers with Connect privileges to execute arbitrary code, potentially leading to unauthorized access or data loss.

Is CVE-2003-0836 still relevant for current systems?

While CVE-2003-0836 is an older vulnerability, its relevance depends on the continued use of the affected DB2 versions in legacy systems.