CVE-2003-0898 in IBM DB2 Universal Database
Summary
IBM DB2 7.2 before FixPak 10a, and earlier versions including 7.1, allows local users to overwrite arbitrary files and gain privileges via a symlink attack on (1) db2job and (2) db2job2.
Reservation
10/27/2003
Disclosure
11/17/2003
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 21005 | IBM DB2 Universal Database db2job2 symlink | 61 | Proof-of-Concept | Official fix | CVE-2003-0898 |