VULNERABILITY INTELLIGENCE

CVE-2004-1372

CVSS score7.2 HIGH
EPSS probability0.49%
CISA KEVNot currently listed
Published2004-09-01
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.

Primary references