CVE-2004-1372

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-09-01 · updated 2026-06-16

Description

Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.

Affected products

IBM Db2 Universal Database: 7.0, 7.1, 7.2, 8.1

References

http://marc.info/?l=bugtraq&m=110382462924162&w=2
http://marc.info/?l=bugtraq&m=110382730431065&w=2
http://www.ngssoftware.com/advisories/db223122004K.txt
http://www.ngssoftware.com/advisories/db223122004L.txt
http://www.securityfocus.com/bid/11089
https://exchange.xforce.ibmcloud.com/vulnerabilities/18663
https://exchange.xforce.ibmcloud.com/vulnerabilities/18682
http://marc.info/?l=bugtraq&m=110382462924162&w=2
http://marc.info/?l=bugtraq&m=110382730431065&w=2
http://www.ngssoftware.com/advisories/db223122004K.txt
http://www.ngssoftware.com/advisories/db223122004L.txt
http://www.securityfocus.com/bid/11089

Get alerted when CVE-2004-1372 or the next vulnerability affects your stack