CVE-2004-1372
Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute...
CVE-2004-1372 is a high vulnerability (CVSS 7.2) in Ibm Db2 Universal Database, published September 1, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.49%, the 42nd percentile. No source names a fixed version.
- Severity
- 7.2 HighCVSS 2.0, NVD
- Exploit chance
- 0.49%EPSS, 42nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.
Exploit likelihood
Affected products
What each source reports
NVD Score used
Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.
- Record
CVE-2004-1372- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.
- Record
CVE-2004-1372- Updated
- 2026-11-02
EUVDEUVD-2004-1369No score
Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.
- Record
EUVD-2004-1369- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jw25-84pj-6h6cNo score
Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute...
Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.
- Record
GHSA-jw25-84pj-6h6c- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
marc.info?l=bugtraq&m=110382462924162&w=2
exchange.xforce.ibmcloud.com/vulnerabilities/18682
securityfocus.com/bid/11089
ngssoftware.com/advisories/db223122004L.txt
nvd.nist.gov/vuln/detail/CVE-2004-1372
github.com/advisories/GHSA-jw25-84pj-6h6c