CVE-2004-1372
Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute...
Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.
Exploit likelihood
What each source reports
NVD Score used
Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.
- Record
CVE-2004-1372- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.
- Record
CVE-2004-1372- Updated
- 2026-11-02
EUVDEUVD-2004-1369 No score
Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.
- Record
EUVD-2004-1369- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jw25-84pj-6h6c No score
Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute...
Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.
- Record
GHSA-jw25-84pj-6h6c- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-1372 is a high vulnerability (CVSS 7.2) in Ibm Db2 Universal Database, published September 1, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.49%, the 42nd percentile. No source names a fixed version.
References
marc.info?l=bugtraq&m=110382462924162&w=2
exchange.xforce.ibmcloud.com/vulnerabilities/18682
securityfocus.com/bid/11089
ngssoftware.com/advisories/db223122004L.txt
nvd.nist.gov/vuln/detail/CVE-2004-1372
github.com/advisories/GHSA-jw25-84pj-6h6c