CVE-2003-1049: Medium severity IBM DB2 Universal Database vulnerability
Published Aug 20, 2004
·Updated
IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions (777), which allows local users to modify or delete certain DB2 files.
Affected Software
2 affected components
IBM DB2 Universal Database=8.0
IBM DB2 Universal Database=7.0
Remediation
Patch Available
Event History
Aug 20, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2003-1049?
CVE-2003-1049 is considered a medium severity vulnerability due to the risk of local users being able to modify or delete important DB2 files.
2
How do I fix CVE-2003-1049?
To fix CVE-2003-1049, apply FixPak 12 or later for IBM DB2 Universal Database.
3
Which versions of IBM DB2 Universal Database are affected by CVE-2003-1049?
CVE-2003-1049 affects IBM DB2 Universal Database versions 7.0 and 8.0 prior to specific FixPaks.
4
What kind of permissions issue does CVE-2003-1049 involve?
CVE-2003-1049 involves certain DMS directories being created with insecure permissions of 777.
5
Can local users exploit CVE-2003-1049?
Yes, local users can exploit CVE-2003-1049 to modify or delete specific DB2 files due to the insecure permissions.