CVE-2004-0253 IBM Cloudscape 5.1 running jdk 1.4.2_03 allows remote attackers to execute arbitrary programs or cause a denial of service via certain SQL code, possibly due to a SQL injection vulnerability.
HighCVSS 10.0
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Cloudscape 5.1 running jdk 1.4.2_03 allows remote attackers to execute arbitrary programs or cause a denial of service via certain SQL code, possibly due to a SQL injection vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm cloudscape | = 5.1 | No fix listed |
References
- 20040205 IBM cloudscape SQL Database (DB2J) vulnerable to remote command mailing-list
- 9583 vdb-entry vendor-advisory
- cloudscape-sql-injection(15067) vdb-entry