CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
77.0%
Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 before Fixpak 10 and 10a, and 8.1 before Fixpak 2, allows attackers with “Connect” privileges to execute arbitrary code via a LOAD command.
Vendor | Product | Version | CPE |
---|---|---|---|
ibm | db2_universal_database | 7.2 | cpe:2.3:a:ibm:db2_universal_database:7.2:*:linux:*:*:*:*:* |
ibm | db2_universal_database | 8.1 | cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:* |