CVE-2004-1372: Undefined Security Weakness

Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via 1 a long third argument to the rec2xml function or 2 a long filename argument to the generatedistfile procedure...

IBM DB2 generate_distfile buffer overflow vulnerability (#NISR2122004L)

NGSSoftware Insight Security Research Advisory Name: IBM DB2 generatedistfile buffer overflow Systems Affected: DB2 8.1/7.x Severity: High risk Vendor URL: http://www.ibm.com/ Author: David Litchfield david at ngssoftware.com Relates to: http://www.nextgenss.com/advisories/db2-01.txt Date of Publ...