CVE-2003-1052 IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs.
HighCVSS 7.2
EPSS 1.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm db2 | = 9.0 | No fix listed |
| ibm db2 universal database | = 6.0 | No fix listed |
| ibm db2 universal database | = 7.0 | No fix listed |
| ibm db2 universal database | = 7.1 | No fix listed |
| ibm db2 universal database | = 7.2 | No fix listed |
| ibm db2 universal database | = 8.0 | No fix listed |
| ibm db2 universal database | = 8.1 | No fix listed |
| ibm db2 universal database | = 8.2 | No fix listed |
References
- 20030805 Slight privilege elevation from bin to root in IBM DB2 7.1 - 8.1 all binaries exploit mailing-list patch vendor-advisory
- 8346 exploit patch vdb-entry vendor-advisory
- ibm-db2-gain-privileges(12826) vdb-entry