CVE-2004-1372
- State
- Published
- Severity
- Not scored
- Published
- Jan 19, 2005
- Updated
- Aug 8, 2024
- Reserved
- Jan 7, 2005
Description
Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20041223 IBM DB2 generate_distfile buffer overflow vulnerability (#NISR2122004L)mailing-list
- 20041223 IBM DB2 rec2xml buffer overflow vulnerability (#NISR2122004J)mailing-list
- db2-rec2xml-bo(18682)vdb-entry
- db2-generatedistfile-bo(18663)vdb-entry
- 11089vdb-entry
- http://www.ngssoftware.com/advisories/db223122004L.txt
- http://www.ngssoftware.com/advisories/db223122004K.txt
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.