{"id":"CVE-2003-1051","aliases":["EUVD-2003-1041","GHSA-rj45-5jmh-9g9j"],"status":"published","title":"Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to...","description":"Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01256,"percentile":0.69699,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2004-08-20T04:00:00Z","modified":"2026-06-16T22:03:26Z","exploits":[{"source":"exploitdb","id":"EDB-23344","title":"IBM DB2 - 'db2start' Format String Arbitrary Code Execution","type":"local","platform":"linux","date":"2003-11-07","verified":true,"url":"https://www.exploit-db.com/exploits/23344"},{"source":"exploitdb","id":"EDB-23345","title":"IBM DB2 - 'db2stop' Format String Arbitrary Code Execution","type":"local","platform":"linux","date":"2003-11-07","verified":true,"url":"https://www.exploit-db.com/exploits/23345"},{"source":"exploitdb","id":"EDB-23346","title":"IBM DB2 - 'db2govd' Format String Arbitrary Code Execution","type":"local","platform":"linux","date":"2003-11-07","verified":true,"url":"https://www.exploit-db.com/exploits/23346"}],"products":[{"vendor":"ibm","product":"db2"}],"references":[{"url":"http://www.securityfocus.com/bid/8989","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13633","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.secnetops.com/research/advisories/SRT2003-11-06-0710.txt","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/343804","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-1051"},{"url":"https://github.com/advisories/GHSA-rj45-5jmh-9g9j"}],"sources":{"cve":[{"id":"CVE-2003-1051","description":"Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.","status":"published","published":"2004-08-20T04:00:00Z","modified":"2024-08-08T02:12:35.856Z","updated_at":"2026-11-02T14:20:16.411288Z"}],"euvd":[{"id":"EUVD-2003-1041","description":"Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.","status":"published","published":"2004-08-20T04:00:00Z","modified":"2024-08-08T02:12:35Z","updated_at":"2026-11-03T01:15:04.946725Z"}],"ghsa":[{"id":"GHSA-rj45-5jmh-9g9j","title":"Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to...","description":"Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.","status":"published","published":"2022-04-29T01:27:24Z","modified":"2023-01-30T05:01:44Z","updated_at":"2026-11-02T14:46:28.825002Z"}],"nvd":[{"id":"CVE-2003-1051","description":"Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.","status":"published","published":"2004-09-28T04:00:00Z","modified":"2026-06-16T22:03:26.01Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:48.212104Z"}]}}