CVE-2002-1450

Technical details beyond the basic description are not publicly provided in the connected documents. Available sources confirm IBM UniVerse UV/ODBC DoS via a query with an invalid link between tables (possible buffer overflow). Monitor for updates.

CVE-2003-0580

CVE-2003-0580 : A buffer overflow in uvadmsh affects IBM U2 UniVerse 10.0.0.9 and earlier, allowing the local uvadm user to execute arbitrary code via a long -uv.install command line argument. The vulnerability is caused by overflowing a buffer when handling the -uv.install parameter, with the do...

CVE-2003-0578

IBM U2 UniVerse 10.0.0.9 and earlier are affected by CVE-2003-0578 through the cci_dir component, which can create hard links and unlink files as root. This allows local users to gain privileges by deleting and overwriting arbitrary files. Affected software: IBM U2 UniVerse (version 10.0.0.9 and ...

CVE-2003-0579

CVE-2003-0579 affects IBM U2 UniVerse before or at version 10.0.0.9, where uvadmsh trusts a user-supplied -uv.install command line option to locate and run uv.install. The flaw lets a local attacker cause execution of uv.install by supplying a pathname under the attacker’s control, enabling privi...