IBM DB2 db2stop Format String Arbitrary Code Execution

2003-11-07T00:00:00
ID EDB-ID:23345
Type exploitdb
Reporter SNOSoft
Modified 2003-11-07T00:00:00

Description

IBM DB2 db2stop Format String Arbitrary Code Execution. CVE-2003-1051. Local exploit for linux platform

                                        
                                            source: http://www.securityfocus.com/bid/8989/info
 
Multiple command-line parameter format string vulnerabilities have been discovered in various IBM DB2 binaries. Specifically, format-based functions are implemented erroneously within the db2govd, db2start, and db2stop programs. These binaries are typically installed setuid. As a result, a malicious local user may be capable of gaining elevate privileges.

[kf@RiotStarter adm]$ ./db2stop %n%n
Segmentation fault