CVE-2003-1049

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions (777), which allows local users to modify or delete certain DB2 files.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www-1.ibm.com/support/search.wss?rs=0&q=IY44841&apar=onlyVendor Advisory
http://www-1.ibm.com/support/search.wss?rs=0&q=IY44842&apar=only
http://www.securityfocus.com/bid/9243Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/14030
http://www-1.ibm.com/support/search.wss?rs=0&q=IY44841&apar=onlyVendor Advisory
http://www-1.ibm.com/support/search.wss?rs=0&q=IY44842&apar=only
http://www.securityfocus.com/bid/9243Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/14030

Timeline

Published: Sep 28, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-10507.2Multiple buffer overflows in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via long command line arguments CVE-2003-10517.2Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command CVE-2003-10527.2IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs.CVE-2003-10534.6Multiple buffer overflows in XShisen allow attackers to execute arbitrary code via a long (1) -KCONV command line option or (2) XSHISENLIB e CVE-2003-10545.0mod_access_referer 1.0.2 allows remote attackers to cause a denial of service (crash) via a malformed Referer header that is missing a hostn CVE-2003-10557.2Buffer overflow in the nss_ldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain root access via a long hostname in an LDA CVE-2003-10567.2The ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary files via a symlink attack on temporary file CVE-2003-10577.2Unknown vulnerability in CDE Print Viewer (dtprintinfo) for Sun Solaris 2.6 through 9 may allow local users to execute arbitrary code.CVE-2003-10583.7The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode, allows local users to cause a denial of se CVE-2003-10597.2Unknown vulnerability in the libraries for the PGX32 frame buffer in Solaris 2.5.1 and 2.6 through 9 allows local users to gain root access.CVE-2003-10605.0The NFS Server for Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (UFS panic) via certain invalid UFS requests, wh CVE-2003-10611.2Race condition in Solaris 2.6 through 9 allows local users to cause a denial of service (kernel panic), as demonstrated via the namefs funct