CVE-2003-1052

Description

IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs.

Affected products

• ibm / db29.0 – 9.0
• ibm / db2_universal_database6.0 – 6.0
• ibm / db2_universal_database7.0 – 7.0
• ibm / db2_universal_database7.1 – 7.1
• ibm / db2_universal_database7.2 – 7.2
• ibm / db2_universal_database8.0 – 8.0
• ibm / db2_universal_database8.1 – 8.1
• ibm / db2_universal_database8.2 – 8.2

Exploits & proofs of concept

• exploit-dbIBM DB2 - Shared Library Injectionby daniels@legend.co.uk

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/12826
• MISChttp://www.securityfocus.com/archive/1/331904
• MISChttp://www.securityfocus.com/bid/8346