CVE-2003-1051: High severity IBM DB2 vulnerability

Published Aug 20, 2004

Updated

Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.

Affected Software

1 affected component

IBM DB2=9.0

Remediation

Patch Available

http://www.securityfocus.com/bid/8989

Event History

Aug 20, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2003-1051?

CVE-2003-1051 is considered a high severity vulnerability due to its potential to allow arbitrary code execution by local users.

How do I fix CVE-2003-1051?

To fix CVE-2003-1051, upgrade to a patched version of IBM DB2 Universal Database, specifically targeting versions later than 8.1.

Who is affected by CVE-2003-1051?

CVE-2003-1051 affects local users of IBM DB2 Universal Database 8.1 who can access the command line tools.

What impact does CVE-2003-1051 have on systems?

The impact of CVE-2003-1051 allows local users to execute arbitrary commands, potentially compromising the integrity and security of the system.

Is there a workaround for CVE-2003-1051?

A potential workaround for CVE-2003-1051 includes restricting access to the affected command line tools to trusted users only.